Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-45967

bpf: Return proper address for non-zero offsets in insn array

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Return proper address for non-zero offsets in insn array The map_direct_value_addr() function of the instruction array map incorrectly adds offset to the resulting address. This is a bug, because later the resolve_pseudo_ldimm64() function adds the offset. Fix it. Corresponding selftests are added in a consequent commit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 493d9e0d608339a32f568504d5fd411a261bb0af to < 73ef43202a37d779a8e665a0acae214fa59df9fbaffected
  • 493d9e0d608339a32f568504d5fd411a261bb0af to < e3bd7bdf5ffe49d8381e42843f6e98cd0c78a1e8affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References