CVE-2026-43070

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) verifier. The verifier fails to correctly reset a register's ID after a BPF_END (byte swap) operation. This oversight can lead to the verifier incorrectly propagating learned memory bounds to other registers, creating false confidence in their values. Consequently, this could enable an attacker to perform out-of-bounds memory accesses, potentially leading to system instability or privilege escalation.

This vulnerability is rated as Moderate by Red Hat. Triggering this vulnerability requires access to eBPF, which is root-only in RHEL.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.