CVE-2026-45967
kernel: bpf: Return proper address for non-zero offsets in insn array
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel. Specifically, a bug in the map_direct_value_addr() function, which is part of the Berkeley Packet Filter (BPF) instruction array map, leads to incorrect address calculations when dealing with non-zero offsets. This issue could result in the kernel accessing unintended memory locations. While the direct security impact is not explicitly detailed, such memory access issues can potentially lead to system instability or information exposure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-823 · Use of Out-of-range Pointer Offset