CVE-2026-68462

A flaw was found in the Linux kernel. The BPF (Berkeley Packet Filter) verifier, responsible for ensuring the safety of BPF programs, incorrectly processed negative constant offsets when accessing buffer pointers. This oversight could allow a local attacker to craft a malicious BPF program that bypasses memory access restrictions. Such a bypass could lead to unauthorized reading or writing of memory, potentially resulting in information disclosure or privilege escalation within the system.

This flaw is rated as Moderate severity because successful exploitation requires local access and capabilities to load BPF programs, limiting the overall blast radius. Furthermore, unprivileged eBPF execution is restricted by default across Red Hat Enterprise Linux environments. Supported Red Hat Enterprise Linux kernels do not incorporate the affected upstream code and are not impacted by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.