CVE-2026-80865

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) tracing component. A missing access check in the copy_user_syms function, specifically the absence of an access_ok call before using __get_user on a user space pointer, could allow a local attacker to read sensitive kernel memory. This could lead to information disclosure or potentially cause a system crash.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local authenticated users and primarily results in a denial of service through a kernel crash rather than arbitrary privilege escalation. Standard Red Hat deployments disable unprivileged eBPF access by default, which substantially limits exposure by preventing unprivileged local accounts from interacting with the affected tracing routines. Exploitation is only feasible if an administrator has explicitly permitted unprivileged BPF usage or if an attacker already holds elevated capabilities such as CAP_BPF or CAP_SYS_ADMIN.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.