CVE-2026-98631

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service (DoS) or potentially expose sensitive memory by triggering an out-of-bounds read in the Berkeley Packet Filter (BPF) socket map implementation. This issue occurs because socket map lookups perform a 64-bit comparison on 32-bit keys, allowing out-of-range index values to bypass bounds checking when maps are configured with large entry limits.

This flaw is rated as Moderate impact because successful exploitation requires elevated privileges, such as CAP_BPF or CAP_NET_ADMIN, to create and manipulate AF_XDP socket maps. In typical Red Hat Enterprise Linux environments, unprivileged users cannot define these specialized networking maps with the exceptionally high entry counts needed to trigger the flaw. Therefore, the blast radius is restricted to local privileged accounts where an abnormal bounds evaluation during lookups can result in a kernel crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.