Vulnerability in Linux Kernel Affecting BPF Functionality

CVE-2026-98383

What is CVE-2026-98383?

A vulnerability in the Linux Kernel's BPF (Berkeley Packet Filter) functionality has been identified, specifically in the handling of LWT_SEG6LOCAL programs. This flaw permits an LWT_SEG6LOCAL program to compromise its cached Segment Routing Header (SRH) through the use of bpf_lwt_seg6_adjust_srh(), subsequently calling bpf_skb_pull_data(). This may lead to the reallocation of skb->head, resulting in a dangling pointer for the per-CPU SRH. Affected systems could face an increased risk of exploit due to unsafe combinations of helper functions within the BPF environment, necessitating the restriction of bpf_skb_pull_data() for LWT_SEG6LOCAL programs.

References