SUSE CVE-2026-45903

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototypes After commit 37cce22dbd51 "bpf: verifier: Refactor helper access type tracking", the verifier started relying on the access type flags in helper function prototypes to perform...

CVE-2026-45903

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. This vulnerability occurs because several BPF helper functions lack proper memory access flags, such as MEMRDONLY or MEMWRITE. Consequently, the verifier may incorrectly assume that buffer contents remain unchanged across...

CVE-2026-45933

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. The synclinkedregs function fails to preserve the register ID during bounds propagation, which can lead to incorrect register state. This issue may allow a local attacker to trigger a 'division by zero' error, resulting i...

CVE-2026-45903

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototypes After commit 37cce22dbd51 "bpf: verifier: Refactor helper access type tracking", the verifier started relying on the access type flags in helper function prototypes to perform...

CVE-2026-45903 bpf: Fix memory access flags in helper prototypes

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory access flags in helper prototypes After commit 37cce22dbd51 "bpf: verifier: Refactor helper access type tracking", the verifier started relying on the access type flags in helper function prototypes to perform...

CVE-2026-45839

In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpfcoreparsespec CO-RE accessor strings are colon-separated indices that describe a path from a root BTF type to a target field, e.g. "0:1:2" walks through nested struct members...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an incorrect scalar handling in the maybeforkscalars function for BPFOR. The maybeforkscalars function is called for both BPFAND and BPFOR when the source operand is a constant. When dst has a signed range of -1, 0, it...

kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue 1 where the following warning appears in kernel dmesg: 60.643604 verifier backtracking bug 60.643635 WARNING: CPU: 10 PID: 2315...

CVE-2026-43009

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. The verifier, responsible for ensuring the safety of BPF programs, incorrectly tracks the precision of atomic fetch operations. This error can lead to the verifier pruning execution paths that should not be considered...

AZL-85407 CVE-2026-43009 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrackinsn encounters a BPFSTX instruction with BPFATOMIC and BPFFETCH, the src register or r0 for BPFCMPXCHG also acts as a destination, thus receiving th...

PT-2026-34431

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs process bpf exit full passes check lock = !curframe to check resource leak, which is false in cases when bpf throw is called from a static subprog. This makes check resource leak...

Linux Distros Unpatched Vulnerability : CVE-2026-31526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix exception exit lock checking for subprogs processbpfexitfull passes checklock = !curframe to checkresourceleak, which is false in cases when bpfthrow i...

CVE-2026-31413

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability arises from an incorrect handling of certain operations within the BPF verifier, which is responsible for ensuring the safety of BPF programs. This discrepancy between the verifier's analysis and the...

Exploit for CVE-2026-31413

CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...

Exploit for Out-of-bounds Read in Linux Linux_Kernel

CVE-2026-31413: One Byte in the BPF Verifier to Container Esca...

The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkfuncarg function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, relates to the lack of checking for the returned value. Exploiting this vulnerability could allow a remote attacker to compromi...

The vulnerability of the regs_refineCond_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the regsrefineCondop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter in Linux operating systems, is related to the absence of a “default” block in the switch statement. Exploiting this vulnerability could allow an attacker to trigger a servi...

Azure Linux 3.0 Security Update: kernel (CVE-2024-45020)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45020 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004208 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003902)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003902 advisory. kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain ORNULL...