Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45839

In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CO-RE accessor strings are colon-separated indices that describe a path from a root BTF type to a target field, e.g. "0:1:2" walks through nested struct members. bpf_core_parse_spec() parses each component with sscanf("%d"), so negative values like -1 are silently accepted. The subsequent bounds checks (access_idx >= btf_vlen(t)) only guard the upper bound a
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ed720b3b9baf9126c4bc0de57704f84747509217cade35d73a194d18687895aa
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["tools/lib/bpf/relo_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a9e777f856cd2f1efc106afc7bf21aef868509d5","status":"affected","version":"ddc7c3042614e273044f698d2beab25cc3842d45","versionType":"git"},{"lessThan":"669349b4612c26b3d7aacfa99d7174681bd19223","status":"affected","version":"ddc7c3042614e273044f698d2beab25cc3842d45","versionType":"git"},{"lessThan":"3ff85ae79e1a74baeb916b78a63d821f6d19a994","status":"affected","version":"ddc7c3042614e273044f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["tools/lib/bpf/relo_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.4"},{"lessThan":"5.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["tools/lib/bpf/relo_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a9e777f856cd2f1efc106afc7bf21aef868509d5","status":"affected","version":"ddc7c3042614e273044f698d2beab25cc3842d45","versionType":"git"},{"lessThan":"669349b4612c26b3d7aacfa99d7174681bd19223","status":"affected","version":"ddc7c3042614e273044f698d2beab25cc3842d45","versionType":"git"},{"lessThan":"3ff85ae79e1a74baeb916b78a63d821f6d19a994","status":"affected","version":"ddc7c3042614e273044f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["tools/lib/bpf/relo_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.4"},{"lessThan":"5.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/1c22483a2c4bbf747787f328392ca3e68619c4dc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/36a9012f76ba8d9189ae56a1f8bb7c87c07a1f3a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/3ff85ae79e1a74baeb916b78a63d821f6d19a994"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/669349b4612c26b3d7aacfa99d7174681bd19223"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/76f2ebaf79a9ae6d0737b87f045fe769e425d78f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/99dbab7b5a12d8f58d5b0aa2f7a1fe656a70f4b2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a9e777f856cd2f1efc106afc7bf21aef868509d5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8b2b74fe1c770f4f49defc36d514a0ba4ce1cdeec46a38aae65e8c71e8f6cd5 · sha256:a5135b94a6c08f5d… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer