CVE-2026-45838

A flaw was found in the Linux kernel. Specifically, within the Berkeley Packet Filter (BPF) component, an error in the cgroup_storage_get_next_key() function's end-of-list detection mechanism can cause the system to read from an invalid memory location. This incorrect handling may lead to internal map fields being copied to userspace, resulting in information disclosure.

This vulnerability is assessed as Moderate severity because it requires local access with elevated privileges to interact with BPF cgroup storage maps, significantly restricting the threat vector. An authorized local user traversing map keys can trigger improper list boundary detection, exposing internal kernel map metadata to user space. The issue is confined to reading restricted memory and does not allow memory corruption or direct privilege escalation on Red Hat Enterprise Linux systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.