CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()
bpf: reject negative CO-RE accessor indices in bpfcoreparsespec()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Upgrade
Upgrade
kernel/bpfto a version that resolves this vulnerability.Patch bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() - Compensating control
Block or restrict the ability to use CAP_BPF (e.g., remove CAP_BPF from untrusted users/containers) because the bug is reachable with CAP_BPF during BPF_PROG_LOAD.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45839?
CVE-2026-45839 has a risk rating of 53.
How do I fix CVE-2026-45839?
To fix CVE-2026-45839, ensure that your Linux kernel is updated to a version that includes the patch addressing this vulnerability.
What type of vulnerability is CVE-2026-45839?
CVE-2026-45839 is a vulnerability in the Linux kernel related to the improper handling of negative CO-RE accessor indices.
What impact does CVE-2026-45839 have on Linux systems?
CVE-2026-45839 could potentially allow for improper access or manipulation of data structures due to negative indexing in CO-RE accessor strings.
When was CVE-2026-45839 published?
CVE-2026-45839 was published on May 27, 2026.