Riskcovery

CVE-2026-43306

bpf: crypto: Use the correct destructor kfunc type

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: crypto: Use the correct destructor kfunc type

With CONFIG_CFI enabled, the kernel strictly enforces that indirect function calls use a function pointer type that matches the target function. I ran into the following type mismatch when running BPF self-tests:

CFI failure at bpf_obj_free_fields+0x190/0x238 (target: bpf_crypto_ctx_release+0x0/0x94; expected type: 0xa488ebfc) Internal error: Oops - CFI: 00000000f2008228 [#1] SMP ...

As bpf_crypto_ctx_release() is also used in BPF programs and using a void pointer as the argument would make the verifier unhappy, add a simple stub function with the correct type and register it as the destructor kfunc instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3e1c6f35409f9e447bf37f64840f5b65576bfb78 to before 4e3e57dbf46dad3498f8c4219ce2dba756875962Affected
  • 3e1c6f35409f9e447bf37f64840f5b65576bfb78 to before 50d6fd69388cc7b05dce72f09080674dcede4ac9Affected
  • 3e1c6f35409f9e447bf37f64840f5b65576bfb78 to before 3979a550fe06b370d73647f59cf462fa525c9ec4Affected
  • 3e1c6f35409f9e447bf37f64840f5b65576bfb78 to before b40a5d724f29fc2eed23ff353808a9aae616b48aAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.