Riskcovery

CVE-2026-45971

bpf: Limit bpf program signature size

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Limit bpf program signature size

Practical BPF signatures are significantly smaller than KMALLOC_MAX_CACHE_SIZE

Allowing larger sizes opens the door for abuse by passing excessive size values and forcing the kernel into expensive allocation paths (via kmalloc_large or vmalloc).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 349271568303695f0ac3563af153d2b4542f6986 to before 5835a077c6f5c565d525eaca9fac01572b97a9b9Affected
  • 349271568303695f0ac3563af153d2b4542f6986 to before eb8166c79097996396468a341de258a798789d36Affected
  • 349271568303695f0ac3563af153d2b4542f6986 to before ea1535e28bb3773fc0b3cbd1f3842b808016990cAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.