CVE-2026-98058

The Linux kernel contains a vulnerability where the bpf_sys_bpf() and bpf_sys_close() helpers lack the .might_sleep attribute. Because these helpers can take mutexes, allocate memory with GFP_KERNEL, or wait for RCU grace periods, their use in non-sleepable contexts—such as a bpf_timer callback e...

EUVD-2026-86711

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpfsysbpf executes the bpf2 syscall body, which can take mutexes, allocate with GFPKERNEL, and wait for an RCU grace period. bpfsysclose reaches closefd and filpclose, which can sleep as wel...

CVE-2022-50069 BPF: Fix potential bad pointer dereference in bpf_sys_bpf()

In the Linux kernel, the following vulnerability has been resolved: BPF: Fix potential bad pointer dereference in bpfsysbpf The bpfsysbpf helper function allows an eBPF program to load another eBPF program from within the kernel. In this case the argument union bpfattr pointer as well as the insn...

CVE-2022-50069: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: BPF: Fix potential bad pointer dereference in bpfsysbpf The bpfsysbpf helper function allows an eBPF program to load another eBPF program from within the kernel. In this case the argument union bpfattr pointer as well as the insn...

GSD-2022-1005525 BPF: Fix potential bad pointer dereference in bpf_sys_bpf()

BPF: Fix potential bad pointer dereference in bpfsysbpf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...