PT-2026-51925 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53031

NVD

In the Linux kernel, the following vulnerability has been resolved:

bpf: Validate node id in arena alloc pages()

arena alloc pages() accepts a plain int node id and forwards it through the entire allocation chain without any bounds checking.

Validate node id before passing it down the allocation chain in arena alloc pages().

Related Identifiers

CVE-2026-53031

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53031 · Security Note
• https://git.kernel.org/stable/c/31d3b4b28e55835646d6829d60023f730dd34e85 · Note
• https://git.kernel.org/stable/c/2845989f2ebaf7848e4eccf9a779daf3156ea0a5 · Note
• https://git.kernel.org/stable/c/fb66e20130f95a93ffea1677252526a9e39170b2 · Note
• https://git.kernel.org/stable/c/e15900888c09480a4c632bc598f1c5bd39bed6d6 · Note