CVE-2026-45866
mediumEPSS Score
0.0%
Exploitation probability in 30 days
Top 93% most likely to be exploited
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's CAIF serial line discipline. A race condition exists between the `ldisc_close()` function, which frees the terminal (tty) device, and the `handle_tx()` function, which may attempt to access the freed device. This use-after-free (UAF) vulnerability allows a local attacker to potentially cause system instability or execute arbitrary code.
CWE
CWE-364Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9