CVE-2026-64355

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) devmap feature. When handling devmap broadcast redirects, fragmented network frames are not properly managed during the cloning process. This can lead to an out-of-bounds access, where the system attempts to read or write data beyond the allocated memory, potentially causing system instability or denial of service.

This vulnerability is rated as Moderate severity because triggering the issue requires non-standard configurations involving custom eBPF XDP programs actively utilizing broadcast redirection maps. Deploying such programs on Red Hat Enterprise Linux systems necessitates elevated privileges, such as CAP_NET_ADMIN or CAP_BPF, and unprivileged BPF execution is disabled by default. Systems operating with typical networking configurations that do not implement devmap packet duplication remain unaffected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.