CVE-2026-98376

A flaw in the Linux kernel BPF subsystem allows a local attacker to trigger an out-of-bounds memory access . The issue occurs because percpu_array_map_ops.map_meta_equal points to a generic function that fails to compare max_entries. An attacker can replace an inner per-CPU array map with one con...

CVE-2026-98376: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Use arraymapmetaequal for percpu array inner map replacement percpuarraymapops.mapmetaequal points to the generic bpfmapmetaequal, which does not compare maxentries. When a percpu array serves as an inner map, replacing it...