CVE-2026-64192

A flaw was found in the Linux kernel. When the BPF (Berkeley Packet Filter) Linux Security Module (LSM) is compiled into the kernel but not explicitly enabled at boot, a privileged user can create and update a BPF inode storage map. This improper initialization leads to an incorrect memory offset calculation, which can corrupt internal kernel structures. Consequently, this can trigger a kernel panic, resulting in a Denial of Service (DoS) for the system.

This vulnerability is rated as Moderate severity because exploitation requires elevated privileges, specifically CAP_SYS_ADMIN or CAP_BPF, to create and manipulate BPF inode storage maps. On standard Red Hat Enterprise Linux installations, unprivileged access to the eBPF subsystem is disabled by default, restricting map creation solely to administrative users. Consequently, the flaw cannot be triggered by untrusted local users, limiting the blast radius to environments where an attacker already holds privileged access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.