CVE-2026-31413
kernel: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
Severity
ImportantRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 12, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. This vulnerability arises from an incorrect handling of certain operations within the BPF verifier, which is responsible for ensuring the safety of BPF programs. This discrepancy between the verifier's analysis and the program's actual execution can be exploited by a local attacker. Successful exploitation could lead to out-of-bounds memory access, potentially allowing for privilege escalation or information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-131 · Incorrect Calculation of Buffer Size