CVE-2026-23383

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) JIT (Just-In-Time) compiler on arm64 architectures. The BPF JIT allocator incorrectly requests a 4-byte alignment for its buffer, while a critical target field within the bpf_plt structure requires 8-byte alignment. This misalignment can lead to a "torn read" when the target field is updated concurrently, causing the JIT to jump to a corrupted memory address. An attacker could potentially exploit this vulnerability to achieve arbitrary code execution.

This flaw is specific to ARM64 systems running BPF programs. The 4-byte alignment of JIT buffers can cause the u64 target field to be misaligned, leading to atomic tearing during concurrent updates via bpf_arch_text_poke(). A torn read could cause JIT code to jump to a corrupted address. Requires BPF privileges and concurrent BPF program patching.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.