CVE Explorer

CVE-2026-45886

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only arg While making some maps in Cilium read-only from the BPF side, we noticed that the bpf_xdp_store_bytes proto is incorrect. In particular, the verifier was throwing the following error: ; ret = ctx_store_bytes(ctx, l3_off + offsetof(struct iphdr, saddr), &nat->address, 4, 0); 635: (79) r1 = *(u64 *)(r10 -144) ; R1=ctx() R10=fp0 fp-144=ctx()

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:aad6a4d337e80853d93ffcfd4d60bec5ff28704bf5e9907f3bd8fab89bf4964e

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.18"},{"lessThan":"5.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqua…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ffb5d1c5e3933b947fc7303ad68bf0c536d0c85e","status":"affected","version":"3f364222d032eea6b245780e845ad213dab28cdd","versionType":"git"},{"lessThan":"ddc34a1b85505c919026ddc82fafdada9a160b15","status":"affected","version":"3f364222d032eea6b245780e845ad213dab28cdd","versionType":"git"},{"lessThan":"0db169a91381a473b7974021d1c02f8da72c5775","status":"affected","version":"3f364222d032eea6b245780e845a…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/0db169a91381a473b7974021d1c02f8da72c5775"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/57f7f6a0ad04a65c8a7a067b2f56cbbf2aec9e52"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/6557f1565d779851c4db9c488c49c05a47a6e72f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/d7b87adeb0eb539b9b824b101bb14fb01e41240b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/ddc34a1b85505c919026ddc82fafdada9a160b15"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/ffb5d1c5e3933b947fc7303ad68bf0c536d0c85e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:381e5a8717d7454cfb35754c88a4832c023f9e1bf2562daad5d5ed0cbd30edde · sha256:42275b17e49433e6… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer