CVE-2026-43009

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) verifier. The verifier, responsible for ensuring the safety of BPF programs, incorrectly tracks the precision of atomic fetch operations. This error can lead to the verifier pruning execution paths that should not be considered equivalent, potentially allowing BPF programs to bypass intended security checks or behave unexpectedly.

BPF verifier pruning around atomic fetch precision could accept unsafe programs; upstream tightens analysis. Red Hat advises eBPF-heavy platforms to consume kernel security updates.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.