Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-45971

bpf: Limit bpf program signature size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Limit bpf program signature size Practical BPF signatures are significantly smaller than KMALLOC_MAX_CACHE_SIZE Allowing larger sizes opens the door for abuse by passing excessive size values and forcing the kernel into expensive allocation paths (via kmalloc_large or vmalloc).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 349271568303695f0ac3563af153d2b4542f6986 to < 5835a077c6f5c565d525eaca9fac01572b97a9b9affected
  • 349271568303695f0ac3563af153d2b4542f6986 to < eb8166c79097996396468a341de258a798789d36affected
  • 349271568303695f0ac3563af153d2b4542f6986 to < ea1535e28bb3773fc0b3cbd1f3842b808016990caffected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.14 to ≤ 6.18.*unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References