CVE-2026-45839

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) CO-RE (Compile Once - Run Everywhere) accessor parsing. A local attacker with CAP_BPF capabilities could craft a malicious BPF program that uses negative CO-RE accessor indices. This input validation vulnerability allows for an out-of-bounds read, leading to a kernel crash and a denial of service.