The vulnerability in the `include/linux/filter.h` and `kernel/bpf/core.c` files of Linux operating systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the include/linux/filter.h and kernel/bpf/core.c files of Linux operating systems is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260928-73-0010

The vulnerability of the bpfprogtestrunxdp function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260925-73-0148

The vulnerability of the BTFID function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

PT-2026-85784

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue exists in the bpf component where the copy user syms function uses get user on a user space pointer without a preceding access ok call. This missing check fails to verify if th...

The vulnerability of the bpf_jit_prog_releaseother() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports BPF interpreter for Linux kernel, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the arena_alloc_pages() function in the kernel/bpf/arena.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the arenaallocpages function in the kernel/bpf/arena.c module, which is part of the Linux kernel’s BPF interpreter support, relates to the comparison of numerical ranges without any minimum checks during request processing. Exploiting this vulnerability could allow an attacke...

The vulnerability of the insn_array_map_direct_value_addr() function in the kernel/bpf/bpf_insn_array.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...

OESA-2026-3275 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A security vulnerability exists in QEMU, the details of which have not been fully disclosed.CVE-2026-15578 CVE-2026-15705 is an undisclosed vulnerability in QEMU. The vulnerability has be...

CVE-2026-53032

The CVE-2026-53032 issue affects the Linux kernel's BPF subsystem, specifically the map_kptr_match_type function. A scalar register stored into a kptr can trigger a NULL dereference when the code branches on btf_is_kernel(reg->btf) before verifying base_type(), since such registers have no BTF...

WS-2021-0449

In Linux/Kernel is vulnerable to integer overflow in preallocelemsandfreelist in kernel/bpf/stackmap.c...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013425)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013425 advisory. A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the mapgetnextkey function of the BPF bloom filter. This fla...

The vulnerability of the btf_name_valid_section() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system. This vulnerability allows an attacker to access protected information or cause a service failure.

The vulnerability of the btfnamevalidsection function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, involves reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the __cpu_map_ring_cleanup() function in the kernel/bpf/cpumap.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the __bpf in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpf function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the free_htab_elem() function in the kernel/bpf/hashtab.c module, which is part of the Linux operating system’s BPF interpreter support, allows a hacker to trigger a service failure.

The vulnerability of the freehtabelem function in the kernel/bpf/hashtab.c module, which is part of the Linux kernel’s BPF support for kernel-level instrumentation, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pure_initcall() function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the pureinitcall function in the kernel/bpf/core.c module, which supports the BPF interpreter for Linux kernels, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions copy_verifier_state() and do_check() in the kernel/bpf/verifier.c module support the BPF interpreter of the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions copyverifierstate and docheck in the kernel/bpf/verifier.c module related to the BPF interpreter support in the Linux operating system’s kernel is associated with state management errors. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the regs_refineCond_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the regsrefineCondop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter in Linux operating systems, is related to the absence of a “default” block in the switch statement. Exploiting this vulnerability could allow an attacker to trigger a servi...

Linux Distros Unpatched Vulnerability : CVE-2023-54247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Silence a warning in btftypeidsize syzbot reported a warning in 1 with the following stacktrace: WARNING: CPU: 0 PID: 5005 at kernel/bpf/btf.c:1988...