Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43333

In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF pointers check_mem_access() matches PTR_TO_BUF via base_type() which strips PTR_MAYBE_NULL, allowing direct dereference without a null check. Map iterator ctx->key and ctx->value are PTR_TO_BUF | PTR_MAYBE_NULL. On stop callbacks these are NULL, causing a kernel NULL dereference. Add a type_may_be_null() guard to the PTR_TO_BUF branch, matching the existing PTR_TO_BTF_ID patte
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:efc09322cb99796e4417a86eb6288bd22342774cab575c21d486815e89e69c44
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/verifier.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/verifier.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"10bc4a4dcded509c5d5c67d497900c3922c604cd","status":"affected","version":"b453361384c2db1c703dacb806d5fd36aec4ceca","versionType":"git"},{"lessThan":"21a10c06ffae24cb01fd174a7ab7736001d2ea56","status":"affected","version":"20b2aff4bc15bda809f994761d5719827d66c0b4","versionType":"git"},{"lessThan":"8755066f7bd0f4ac46a29d1708c7b20894539252","status":"affected","version":"20b2aff4bc15bda809f99476…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/verifier.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/verifier.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"10bc4a4dcded509c5d5c67d497900c3922c604cd","status":"affected","version":"b453361384c2db1c703dacb806d5fd36aec4ceca","versionType":"git"},{"lessThan":"21a10c06ffae24cb01fd174a7ab7736001d2ea56","status":"affected","version":"20b2aff4bc15bda809f994761d5719827d66c0b4","versionType":"git"},{"lessThan":"8755066f7bd0f4ac46a29d1708c7b20894539252","status":"affected","version":"20b2aff4bc15bda809f99476…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/10bc4a4dcded509c5d5c67d497900c3922c604cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/21a10c06ffae24cb01fd174a7ab7736001d2ea56"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4f6c99dc0420f1a3d671c1b8ab8a7ac84d9cba09"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/63276547debc4d8a73eefb2c5273b2a905c961b0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/70abd9d118da2f56beb4ec22e3a29becae373535"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8755066f7bd0f4ac46a29d1708c7b20894539252"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b0db1accbc7395657c2b79db59fa9fae0d6656f3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5b0cff94462b749811276c8c1acaca245c0ab6a982373408243ba3be5d268d22 · sha256:45f2f28ee52ebddc… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer