CVE-2026-53078

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) socket operations (sock_ops) program. When a BPF sock_ops program accesses context fields with the same destination and source registers, certain macros fail to properly clear the destination register. This can lead to a stack-out-of-bounds access, potentially allowing an attacker to execute arbitrary code or cause a denial of service. Additionally, it can result in a kernel pointer leak, disclosing sensitive information.

This flaw is rated as Moderate severity because exploitation requires elevated administrative privileges to load and attach BPF socket operations programs. On default Red Hat Enterprise Linux installations, unprivileged users cannot load BPF sock_ops programs, restricting the exposure to already-privileged accounts or compromised administrative services. While triggering the condition could lead to an out-of-bounds read or kernel pointer disclosure, the prerequisite of high local capabilities significantly bounds the blast radius.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.