CVE-2026-64548 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()

🗓️ 27 Jul 2026 20:10:38Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Kernel fix rejects overflow in bpf_msg_push_data caused by BPF len, preventing under-sized allocation and OOB memcpy.

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2026-64548	27 Jul 202620:10	–	cve
Cvelist	CVE-2026-64548 bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()	27 Jul 202620:10	–	cvelist
Debian CVE	CVE-2026-64548	27 Jul 202620:10	–	debiancve
EUVD	EUVD-2026-49599	27 Jul 202620:10	–	euvd
NVD	CVE-2026-64548	27 Jul 202621:17	–	nvd
OSV	DEBIAN-CVE-2026-64548	27 Jul 202621:17	–	osv
OSV	UBUNTU-CVE-2026-64548	28 Jul 202600:00	–	osv
Positive Technologies	PT-2026-65223	27 Jul 202600:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/0c0a8ed85349dae298712d79cb276acfeb794d82
git	www.git.kernel.org/stable/c/4e40056bb5c829f0423f0a6694a0477726d2147e
git	www.git.kernel.org/stable/c/888706a76286c547bd035432602571e8024b5305
git	www.git.kernel.org/stable/c/a12b1575f9feabd91695a9e9d004862f7195fa25
git	www.git.kernel.org/stable/c/bd004716ba75fed6d185795c85cdc92540ebeaab
git	www.git.kernel.org/stable/c/db77b6bb6e6edb79b10b4efcce346eec5582d588
git	www.git.kernel.org/stable/c/f1644c9508d24f50dd9e8ebe8d3ba86e0996d2f5
git	www.git.kernel.org/stable/c/ff39d0e3b4feeb65ca43c453d7c75fdf872ded0d
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64548.json

28 Jul 2026 04:03Current

5.8Medium risk

Vulners AI Score5.8

linux kernel bpf sockmap overflow check allocation size out of bounds memcpy bpf argument type