Linux Kernel Vulnerability in User Space Pointer Handling

CVE-2026-80865

What is CVE-2026-80865?

A vulnerability in the Linux kernel was discovered related to the handling of user space pointers. Specifically, the __get_user function was invoked without a preceding access_ok call, potentially allowing unauthorized access to sensitive memory regions. The vulnerability was identified in the BPF subsystem, leading to an update to include the missing access_ok call for the user space pointer array. Additionally, unnecessary error checks were streamlined for improved performance. This change enhances the security of memory operations and addresses potential exploitation avenues.

References