EUVD-2026-49599

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and computes copy + len for the page allocation size. Since len comes from...

CVE-2026-63926

CVE-2026-63926 affects the Linux kernel where the bpf sockmap data path (bpf_msg_push_data) mishandles the tail fragment offset when inserting data into a scatterlist. The issue occurs when splitting a scatterlist entry into left/right fragments; the right fragment offset was advanced using a mes...

CVE-2026-63926

In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpfmsgpushdata When bpfmsgpushdata inserts data in the middle of a scatterlist entry, it splits the original entry into a left fragment and a right fragment. The right fragment offset is...

PT-2026-61243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf msg push data function within the sockmap component of the BPF Berkeley Packet Filter subsystem. When data is inserted into the middle of a scatterlist entry,...

AZL-72760 CVE-2025-38166 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap 2172.936997 ------------ cut here ------------ 2172.936999 kernel BUG at lib/ioviter.c:629! ...... 2172.944996 PKRU: 55555554 2172.945155 Call Trace: 2172.945299 2172.945428 ? die+0x36/0x90...