Linux Kernel BPF Verifier Heap Buffer Overflow DoS

The vulnerability of the checkstackwritefixedoff function in the kernel/bpf/verifier.c component of the Linux operating system is related to improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel/bpf/cgroup.c Bypass Data Compromise

The vulnerability of the kernel/bpf/cgroup.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel BPF Insecure Compromise

The vulnerability in the kernel/bpf/inode.c component of the Linux operating system is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

Linux Kernel BPF Buffer Overflow DoS

The vulnerability in the bpfprogmapcompatible function within kernel/bpf/core.c in the Linux operating system kernel is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

Exploit for CVE-2026-64507

CVE-2026-64507 — PoC: IBPB flush on BPF JIT allocation Demons...

ROS-20261012-73-0131

The vulnerability of the cgroupstoragegetnextkey function in the kernel/bpf/localstorage.c module, which is part of the Linux operating system’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux kernel BPF Compromise

The vulnerability in the include/linux/filter.h and kernel/bpf/core.c files of Linux operating systems is related to a failure in expected behavior. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protected information...

ROS-20260928-73-0010

The vulnerability of the bpfprogtestrunxdp function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260925-73-0148

The vulnerability of the BTFID function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability stems from the cgroupbpfreplace function in kernel/bpf/cgroup.c, which fails to allocate and specify the required cgroup storage when replacing an eBPF program. As a result, the new program inherits uninitialized...

bpf_jit_prog_releaseother Heap Buffer Overflow DoS

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports BPF interpreter for Linux kernel, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-85784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue exists in the bpf component where the copy user syms function uses get user on a user space pointer without a preceding access ok call. This missing check fails to verify if th...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

BPF Kernel Heap Buffer Overflow DoS

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...

OESA-2026-3275 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A security vulnerability exists in QEMU, the details of which have not been fully disclosed.CVE-2026-15578 CVE-2026-15705 is an undisclosed vulnerability in QEMU. The vulnerability has be...

CVE-2026-53032

The CVE-2026-53032 issue affects the Linux kernel's BPF subsystem, specifically the map_kptr_match_type function. A scalar register stored into a kptr can trigger a NULL dereference when the code branches on btf_is_kernel(reg->btf) before verifying base_type(), since such registers have no BTF...

PT-2026-120419

Уязвимость компонента kernel/bpf/cgroup.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

PT-2026-120420

Уязвимость функции check stack write fixed off компонента kernel/bpf/verifier.c ядра операционной системы Linux связана с некорректной проверкой указанного индекса, положения или смещения во входных данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2026-116297

Уязвимость функции bpf prog map compatible файла kernel/bpf/core.c ядра операционной системы Linux связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаем...