Riskcovery

CVE-2026-45967

bpf: Return proper address for non-zero offsets in insn array

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Return proper address for non-zero offsets in insn array

The map_direct_value_addr() function of the instruction array map incorrectly adds offset to the resulting address. This is a bug, because later the resolve_pseudo_ldimm64() function adds the offset. Fix it. Corresponding selftests are added in a consequent commit.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 493d9e0d608339a32f568504d5fd411a261bb0af to before 73ef43202a37d779a8e665a0acae214fa59df9fbAffected
  • 493d9e0d608339a32f568504d5fd411a261bb0af to before e3bd7bdf5ffe49d8381e42843f6e98cd0c78a1e8Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.