CVE-2026-45933

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) verifier. The sync_linked_regs() function fails to preserve the register ID during bounds propagation, which can lead to incorrect register state. This issue may allow a local attacker to trigger a 'division by zero' error, resulting in a denial of service.

This vulnerability is rated with a Low severity because exploitation requires local access and elevated capabilities, such as CAP_BPF or CAP_SYS_ADMIN, due to unprivileged eBPF being disabled by default on Red Hat Enterprise Linux. An authenticated local user possessing sufficient privileges could load a specially crafted filter program that confuses register state tracking, precipitating an unhandled division-by-zero kernel panic. The risk is restricted to system availability rather than arbitrary code execution or data exposure, and standard deployment defaults prevent unauthorized accounts from reaching the vulnerable verification logic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.