Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53078

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops When a BPF sock_ops program accesses ctx fields with dst_reg == src_reg, the SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() macros fail to zero the destination register in the !fullsock / !locked_tcp_sock path. Both macros borrow a temporary register to check is_fullsock / is_locked_tcp_sock when dst_reg == src_reg, because dst_reg holds the ctx pointer. When th
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ccb4c782d0d795179491b3b459fc3f2b2799d73e5030396559c76cb42edc8a42
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2a2c98141e0a75f2d4a7d78b0316c88b3da784ac","status":"affected","version":"fd09af010788a884de1c39537c288830c3d305db","versionType":"git"},{"lessThan":"22400725de070b787cd6d806c5795370ab46d269","status":"affected","version":"fd09af010788a884de1c39537c288830c3d305db","versionType":"git"},{"lessThan":"18e3ffde1822f0b48b1753bf34aa97ce839df1d8","status":"affected","version":"fd09af010788a884de1c39537c28…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.101","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.42","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.10","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"2a2c98141e0a75f2d4a7d78b0316c88b3da784ac","status":"affected","version":"fd09af010788a884de1c39537c288830c3d305db","versionType":"git"},{"lessThan":"22400725de070b787cd6d806c5795370ab46d269","status":"affected","version":"fd09af010788a884de1c39537c288830c3d305db","versionType":"git"},{"lessThan":"18e3ffde1822f0b48b1753bf34aa97ce839df1d8","status":"affected","version":"fd09af010788a884de1c39537c28…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/metrics/0/cvssV3_1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/10f86a2a5c91fc4c4d001960f1c21abe52545ef6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/18e3ffde1822f0b48b1753bf34aa97ce839df1d8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/22400725de070b787cd6d806c5795370ab46d269"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/2a2c98141e0a75f2d4a7d78b0316c88b3da784ac"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f57edaa14bab98cd582f8f32c7d4366a919fdb53c3a4f89941153e86d51b32ee · sha256:a837a08a0bbbe250… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer