CVE-2026-43030

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. A logic error in the regsafe() function, specifically when handling pointers to packets, could lead to an incorrect state where valid packet ranges are not properly explored. This vulnerability may allow an attacker to bypass certain security checks or cause unexpected system behavior.

This vulnerability is rated as having Low impact because successful exploitation requires the ability to load eBPF programs, an operation restricted to privileged accounts by default in Red Hat Enterprise Linux. On standard deployments, unprivileged eBPF is disabled, preventing non-administrative local users from reaching the affected verifier routines. As a result, the risk is confined to environments where unprivileged program loading is intentionally enabled or where an attacker already possesses administrative capabilities.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.