cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...

CVE-2026-98813

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format BTF metadata, allowing the metadata to be freed while background cleanup tasks were...

CVE-2026-98787

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Missing CPU migration protection during batch lookup and delete operations on hash tables allows a task to migrate between processors while freeing memory. A local attacker could exploit this condition to trigger a kerne...

CVE-2026-98644

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local user could cause a Denial of Service DoS by executing batch lookup or deletion operations on large hash maps. Due to a missing rescheduling check when traversing consecutive empty hash table entries, the kernel c...

CVE-2026-98641

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem on ARM64 architectures. When processing BPF exception callbacks, the compiler fails to properly set up the stack frame pointer register. A local user can exploit this vulnerability by running a crafted BPF program that...

CVE-2026-98626

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing Compile Once – Run Everywhere CO-RE relocation records, the kernel modifies target instructions before verifying that the instruction is an eligible relocation target. A local user can exploit this...

CVE-2026-93127

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. Incorrect handling of scalar identifiers during sign-extending and zero-extending stack operations can lead to a discrepancy between the BPF verifier's understanding of a register's value and its actual runtime value. Th...

CVE-2026-93138

A flaw was found in the Linux kernel. Specifically, a race condition exists within the Berkeley Packet Filter BPF subsystem when preparing vmlinux BPF Type Format BTF data. This issue occurs because the system can publish a pointer to the BTF data before its contents are fully visible, allowing...

CVE-2026-92516

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The vulnerability arises from an incorrect offset check within the BPFRESSPINLOCK mechanism. This error causes the system to verify the wrong memory offset, potentially leading to unexpected behavior or integrity issues...

CVE-2026-92517

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem, specifically in the handling of extable entries for arena loadacquire operations on RISC-V architecture. Due to improper exception handling, a stale register value on fault can be leaked through a map, potentially leadin...

CVE-2026-90359

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When BPF programs are attached to functions that return 16-byte values using specific trampoline types such as fexit, fmodret, fsession, or structops, the BPF trampoline incorrectly preserves only 8 bytes of the return...

CVE-2026-98588

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When allocating a socket map with an excessively large entry count, a signed integer overflow occurs during cleanup when the map is released. A local user with permission to create BPF maps can trigger this issue to caus...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed a UAF by restoring the RCU-delayed inode during bpfanyput. The commit “4f375ade6aa9” “bpf: Avoid RCU context warnings when unpinning htab with internal structs” moved the inode cleanup from -freeinode to...

CVE-2026-90317

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. In sleepable BPF programs, a use-after-free vulnerability can occur due to improper handling of RCU Read-Copy-Update protected pointers after a spin unlock operation. A local attacker with limited capabilities could...

CVE-2026-90300

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfgettaskstack helper function, used by bpfgettaskstack and bpfgettaskstacksleepable, fails to clear a buffer buf on error paths. This oversight can lead to non-deterministic buffer contents, potentially resulting i...

CVE-2026-90299

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When the CONFIGFUNCTIONERRORINJECTION option is disabled, a sleepable tracing program can incorrectly attach to certain symbols, which the BPF verifier misidentifies as kernel functions instead of other BPF programs. A...

CVE-2026-90269

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When a BPF program attempts to perform a load-acquire operation on certain untrusted pointers, the BPF verifier fails to apply necessary fault protection. This oversight can lead to a kernel panic if the dereferenced...

CVE-2026-90159

A flaw was found in the Linux kernel. Specifically, a concurrency vulnerability exists within the Berkeley Packet Filter BPF subsystem when handling cgroup UNIX getname hooks. This issue arises because certain BPF functions, bpfsetsockopt and bpfgetsockopt, are called without first acquiring a...

CVE-2026-98384

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When processing socket destruction requests through the bpfsockdestroy helper, the kernel fails to properly verify if a socket is a full socket before attempting to read its protocol field, causing an out-of-bounds memor...

CVE-2026-98378

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker can trigger a use-after-free flaw by iterating over BPF links while a concurrent link creation operation fails. This issue occurs because the iterator references links before their initialization is...