2 matches found
CVE-2026-97420
The Linux kernel contains a vulnerability in the BPF subsystem where the function bpf_sysctl_set_new_value() fails to append a NUL terminator when replacing a pending sysctl value. This oversight occurs because the helper only copies buf_len bytes, potentially leading to out-of-bounds access in d...
6.3AI score
SaveExploits0References3
EUVD-2026-86033
In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value When writing to sysctls, procsyscallhandler guarantees that the buffer passed to proc handlers is NUL-terminated. If bpfsysctlsetnewvalue replaces the pending sysctl value, it can hand a...
6.3AI score
SaveExploits0References3
20