CVE-2026-98611

The Linux kernel contains a vulnerability in the bpf subsystem where the bpf_crypto_ctx_create() kfunc fails to properly validate the size of the second argument. Because the function reads params->reserved[0] and params->reserved[1] (offsets 14 and 15) before comparing params__sz against t...

CVE-2026-98611 bpf: Check params size before reading reserved fields

In the Linux kernel, the following vulnerability has been resolved: bpf: Check params size before reading reserved fields bpfcryptoctxcreate is a kfunc whose second argument is declared with the sz annotation, so the verifier only guarantees that paramssz bytes of params are valid. The function...

EUVD-2026-103656

In the Linux kernel, the following vulnerability has been resolved: bpf: Check params size before reading reserved fields bpfcryptoctxcreate is a kfunc whose second argument is declared with the sz annotation, so the verifier only guarantees that paramssz bytes of params are valid. The function...