Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45866

In the Linux kernel, the following vulnerability has been resolved: serial: caif: fix use-after-free in caif_serial ldisc_close() There is a use-after-free bug in caif_serial where handle_tx() may access ser->tty after the tty has been freed. The race condition occurs between ldisc_close() and packet transmission: CPU 0 (close) CPU 1 (xmit) ------------- ------------ ldisc_close() tty_kref_put(ser->tty) [tty may be freed here]
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2bb4298df04bf470b83cfd1e9750664bf53d54bbbd09fdf9cbc37cb122f6d2a9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/caif/caif_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.11"},{"lessThan":"3.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/caif/caif_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5e266ba8d330d3b8e5bc198f238cd8901826cfa1","status":"affected","version":"56e0ef527b184b3de2d7f88c6190812b2b2ac6bf","versionType":"git"},{"lessThan":"d3c75db4e0460641dbcd274b40867e252d801da1","status":"affected","version":"56e0ef527b184b3de2d7f88c6190812b2b2ac6bf","versionType":"git"},{"lessThan":"4e63d6f68544ae5269ac9735ae5b69b59b5b8725","status":"affected","version":"56e0ef527b184b3…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/caif/caif_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.11"},{"lessThan":"3.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/caif/caif_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5e266ba8d330d3b8e5bc198f238cd8901826cfa1","status":"affected","version":"56e0ef527b184b3de2d7f88c6190812b2b2ac6bf","versionType":"git"},{"lessThan":"d3c75db4e0460641dbcd274b40867e252d801da1","status":"affected","version":"56e0ef527b184b3de2d7f88c6190812b2b2ac6bf","versionType":"git"},{"lessThan":"4e63d6f68544ae5269ac9735ae5b69b59b5b8725","status":"affected","version":"56e0ef527b184b3…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/308e7e4d0a846359685f40aade023aee7b27284c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/331e2b7051635780edea248dd08ae2026c126f4a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/40962f2bf8cdba63af23aec95ad3f49b689e58e2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/4e63d6f68544ae5269ac9735ae5b69b59b5b8725"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/52731ef4438155cea782fac74e547a327ab9e7c5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5e266ba8d330d3b8e5bc198f238cd8901826cfa1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c8c197aaa56b25a2d54f3aa07e27e228d6c08546"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/d3c75db4e0460641dbcd274b40867e252d801da1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8569127e79204b362b877663b74af769ba4c84125a4d23b581d35cd969984c8b · sha256:07d71ddbb3096079… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer