CVE Database›Document archive›CVE-2026-45967

CVE-2026-45967

kernel: bpf: Return proper address for non-zero offsets in insn array

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. Specifically, a bug in the map_direct_value_addr() function, which is part of the Berkeley Packet Filter (BPF) instruction array map, leads to incorrect address calculations when dealing with non-zero offsets. This issue could result in the kernel accessing unintended memory locations. While the direct security impact is not explicitly detailed, such memory access issues can potentially lead to system instability or information exposure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-823 · Use of Out-of-range Pointer Offset