CVE Database›Document archive›CVE-2026-31413

CVE-2026-31413

kernel: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 12, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. This vulnerability arises from an incorrect handling of certain operations within the BPF verifier, which is responsible for ensuring the safety of BPF programs. This discrepancy between the verifier's analysis and the program's actual execution can be exploited by a local attacker. Successful exploitation could lead to out-of-bounds memory access, potentially allowing for privilege escalation or information disclosure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size