CVE-2026-53076 bpf: Fix OOB in pcpu_init_value

🗓️ 24 Jun 2026 16:30:17Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Fix out-of-bounds read in pcpu_init_value when copying from CGROUP_STORAGE to a pcpu map with non-aligned value size.

Reporter	Title	Published	Views	Family All 19
CBLMariner	CVE-2026-53076 affecting package kernel for versions less than 6.6.143.1-1	8 Jul 202616:02	–	cbl_mariner
CVE	CVE-2026-53076	24 Jun 202616:30	–	cve
Cvelist	CVE-2026-53076 bpf: Fix OOB in pcpu_init_value	24 Jun 202616:30	–	cvelist
Debian CVE	CVE-2026-53076	24 Jun 202616:30	–	debiancve
EUVD	EUVD-2026-38944	24 Jun 202616:30	–	euvd
Microsoft CVE	bpf: Fix OOB in pcpu_init_value	27 Jun 202608:11	–	mscve
NVD	CVE-2026-53076	24 Jun 202617:17	–	nvd
OSV	BELL-CVE-2026-53076	26 Jun 202606:12	–	osv
OSV	DEBIAN-CVE-2026-53076	24 Jun 202617:17	–	osv
OSV	ECHO-13A9-5C5F-C598	25 Jun 202609:55	–	osv

Source	Link
git	www.git.kernel.org/stable/c/576afddfee8d1108ee299bf10f581593540d1a36
git	www.git.kernel.org/stable/c/6086079e6d1c32ba4c4b422612b8aebb1129a96c
git	www.git.kernel.org/stable/c/634a793d0e1c822412095d25a1338f8831ad894c
git	www.git.kernel.org/stable/c/e0378419b0e20178b5d100b27c9cc7e51064202e
git	www.git.kernel.org/stable/c/e19c5ed9f1922a6854073f8651a63fa7be26e9e9
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53076.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-53076
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

08 Jul 2026 08:05Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.1

EPSS0.00116