The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85784

In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access ok call to copy user syms As reported by sashiko we use get user without prior access ok call on the user space pointer. Adding the missing call for the whole pointer array. Plus removing the err check in...

The vulnerability of the arena_alloc_pages() function in the kernel/bpf/arena.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

The vulnerability of the insn_array_map_direct_value_addr() function in the kernel/bpf/bpf_insn_array.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...

CVE-2026-53032

The CVE-2026-53032 issue affects the Linux kernel's BPF subsystem, specifically the map_kptr_match_type function. A scalar register stored into a kptr can trigger a NULL dereference when the code branches on btf_is_kernel(reg->btf) before verifying base_type(), since such registers have no BTF...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013425 advisory. A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This fla...

The vulnerability of the btf_name_valid_section() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system. This vulnerability allows an attacker to access protected information or cause a service failure.

The vulnerability of the btfnamevalidsection function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, involves reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the __cpu_map_ring_cleanup() function in the kernel/bpf/cpumap.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the __bpf in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpf function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the pure_initcall() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the pureinitcall function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the free_htab_elem() function in the kernel/bpf/hashtab.c module, which is part of the Linux operating system’s BPF interpreter support, allows a hacker to trigger a service failure.

The vulnerability of the freehtabelem function in the kernel/bpf/hashtab.c module, which is part of the Linux kernel’s BPF support for kernel-level instrumentation, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions copy_verifier_state() and do_check() in the kernel/bpf/verifier.c module support the BPF interpreter of the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions copyverifierstate and docheck in the kernel/bpf/verifier.c module related to the BPF interpreter support in the Linux operating system’s kernel is associated with state management errors. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the regs_refineCond_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the regsrefineCondop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter in Linux operating systems, is related to the absence of a “default” block in the switch statement. Exploiting this vulnerability could allow an attacker to trigger a servi...

Linux Distros Unpatched Vulnerability : CVE-2023-54247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Silence a warning in btftypeidsize syzbot reported a warning in 1 with the following stacktrace: WARNING: CPU: 0 PID: 5005 at kernel/bpf/btf.c:1988...

CVE-2025-68725 bpf: Do not let BPF test infra emit invalid GSO types to stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

CVE-2025-68355 bpf: Fix exclusive map memory leak

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exclusive map memory leak When exclproghash is 0 and exclproghashsize is non-zero, the map also needs to be freed. Otherwise, the map memory will not be reclaimed, just like the memory leak problem reported by syzbot 1...

The vulnerability of the check_btf_line() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the checkbtfline function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the copy_verifier_state() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyverifierstate function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the gdo_misc_fixups function in the kernel/bpf/verifier.c module, which supports the BPF interpreter of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the gdomiscfixups function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...