Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed the effective prog array index with BPFFPREORDER. The functions replaceeffectiveprog and purgeeffectiveprogs determined the position of programs in the effective array by traversing the program list hlist and counti...

CVE-2026-72427

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup program handling. Incorrect indexing in the replaceeffectiveprog and purgeeffectiveprogs functions, particularly when BPFFPREORDER programs are active, can lead to memory corruption. This issue can result in overwriting...

CVE-2026-72427

CVE-2026-72427 (Linux kernel) fixes an incorrect indexing of the effective BPF program array when BPF_F_PREORDER is used. The vulnerable path was in replace_effective_prog() (bpf_link_update()) and purge_effective_progs(), which located slots by linearly walking the program hlist. The computed la...