BPF Inode Storage Map Vulnerability in Linux Kernel

CVE-2026-64192

What is CVE-2026-64192?

The vulnerability in the Linux kernel arises when BPF inode storage maps (BPF_MAP_TYPE_INODE_STORAGE) are compiled without the necessary initialization of the BPF LSM framework before enabling its functionality. This leads to incorrect blob size calculations, potentially resulting in user-privileged operations that may trigger a kernel panic due to memory corruption. To address this, a global boolean flag is introduced to ensure proper initialization, preventing users from allocating inode storage maps under unsupported conditions.

References