CVE-2026-53031: bpf: Validate node_id in arena_alloc_pages()
In the Linux kernel, the following vulnerability has been resolved:
bpf: Validate nodeid in arenaallocpages()
arenaallocpages() accepts a plain int nodeid and forwards it through the entire allocation chain without any bounds checking.
Validate nodeid before passing it down the allocation chain in arenaallocpages().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53031?
CVE-2026-53031 has a risk score of 34, indicating a moderate severity level.
How do I fix CVE-2026-53031?
To fix CVE-2026-53031, ensure you upgrade to the patched version of the Linux kernel where the validation of node_id is implemented.
What systems are affected by CVE-2026-53031?
CVE-2026-53031 affects the Linux kernel, particularly versions prior to the release that addresses the issue.
What does CVE-2026-53031 vulnerability entail?
CVE-2026-53031 involves a lack of bounds checking on the node_id parameter in arena_alloc_pages() which could lead to potential exploitation.
When was CVE-2026-53031 published?
CVE-2026-53031 was published on June 24, 2026.