CVE-2026-63926

A flaw was found in the Linux kernel's sockmap feature. When the bpf_msg_push_data function processes data, it incorrectly calculates the offset for data fragments, leading to an inconsistent memory arrangement. This issue could potentially allow a local attacker to cause data corruption or system instability.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is confined to local authenticated users and requires specific eBPF socket message programs to trigger a denial of service. Under typical enterprise deployments, standard unprivileged accounts cannot load or attach BPF programs to socket maps, restricting the attack surface to privileged or specialized networking workloads. Successfully triggering this boundary calculation error corrupts scatterlist layouts during message manipulation, resulting in system instability or crashes rather than direct privilege escalation or data leakage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.