PT-2026-94970

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where per-CPU map elements are stored using a rounded size, but the copy map value long function passes only the map-value size to bpf obj memcpy. Wh...

PT-2026-68076

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF TCP implementation where a double socket release can occur during batch reallocation. The function bpf iter tcp batch releases the current batch using bpf iter...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability of the bpfiterbitsnew function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

kernel: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator

A flaw was found in the Linux kernel schedext BPF iterator. bpfiterscxdsqnew can return an error without clearing the iterator, and a later next call dereferences that uninitialized state. A local user who can load that BPF program can crash the kernel...

UBUNTU-CVE-2025-38012

In the Linux kernel, the following vulnerability has been resolved: schedext: bpfiterscxdsqnew should always initialize iterator BPF programs may call next and destroy on BPF iterators even after new returns an error value e.g. bpfforeach macro ignores error returns from new. bpfiterscxdsqnew cou...

SUSE CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

SUSE CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

DEBIAN-CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

UBUNTU-CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

PT-2024-34087

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the bpf iter bits destroy function. The issue arises from an incorrect check for dynamically allocated bits, potential...

PT-2024-34086

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a vulnerability in the Linux kernel where the function bpf iter bits new does not properly check the validity of nr words. This can lead to stack corruption due to b...