Buffer Overflow in Linux Kernel Affecting BPF and Sockmap Functionality

CVE-2026-64548

What is CVE-2026-64548?

A vulnerability has been identified in the Linux kernel related to a buffer overflow in the bpf_msg_push_data() function, primarily affecting BPF and sockmap implementations. When the scatterlist ring buffer is nearing its capacity, the function may incorrectly calculate the allocation size due to an overflow caused by user-controlled input. This oversight can lead to an undersized memory allocation followed by an out-of-bounds memory copy operation, resulting in potential memory corruption and instabilities. It is recommended to implement an overflow check prior to memory allocation to mitigate the risks associated with this vulnerability.

References