PT-2026-43838 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45971

NVD

In the Linux kernel, the following vulnerability has been resolved:

bpf: Limit bpf program signature size

Practical BPF signatures are significantly smaller than KMALLOC MAX CACHE SIZE

Allowing larger sizes opens the door for abuse by passing excessive size values and forcing the kernel into expensive allocation paths (via kmalloc large or vmalloc).

Related Identifiers

CVE-2026-45971

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-45971 · Security Note
• https://git.kernel.org/stable/c/ea1535e28bb3773fc0b3cbd1f3842b808016990c · Note
• https://git.kernel.org/stable/c/eb8166c79097996396468a341de258a798789d36 · Note
• https://git.kernel.org/stable/c/5835a077c6f5c565d525eaca9fac01572b97a9b9 · Note