Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64192

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized When CONFIG_BPF_LSM=y is set, BPF inode storage maps (BPF_MAP_TYPE_INODE_STORAGE) are compiled into the kernel. However, if the BPF LSM is not explicitly enabled at boot time (e.g. omitted from the "lsm=" boot parameter), lsm_prepare() is never executed for the BPF LSM. Consequently, the BPF inode security blob offset (bpf_lsm_blob_sizes.lbs_inode) is
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e9cbe4822e4ecce9124281d46f9fb67c04cb22fa01e17c9a7e9e2cf1cce7a74b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/linux/bpf_lsm.h","kernel/bpf/bpf_inode_storage.c","security/bpf/hooks.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5337eebdf8c5d4810b1913047f078d2815d5645f","status":"affected","version":"8ea636848aca35b9f97c5b5dee30225cf2dd0fe6","versionType":"git"},{"lessThan":"de984ea883405420fdc416ae8964b752df586970","status":"affected","version":"8ea636848aca35b9f97c5b5dee30225cf2dd0fe6","versionType":"git"},{"lessThan":"267fdd9b6530c399dfd996e1a0a7628b45baf9f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["include/linux/bpf_lsm.h","kernel/bpf/bpf_inode_storage.c","security/bpf/hooks.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffecte…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/linux/bpf_lsm.h","kernel/bpf/bpf_inode_storage.c","security/bpf/hooks.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5337eebdf8c5d4810b1913047f078d2815d5645f","status":"affected","version":"8ea636848aca35b9f97c5b5dee30225cf2dd0fe6","versionType":"git"},{"lessThan":"de984ea883405420fdc416ae8964b752df586970","status":"affected","version":"8ea636848aca35b9f97c5b5dee30225cf2dd0fe6","versionType":"git"},{"lessThan":"267fdd9b6530c399dfd996e1a0a7628b45baf9f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["include/linux/bpf_lsm.h","kernel/bpf/bpf_inode_storage.c","security/bpf/hooks.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.10"},{"lessThan":"5.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffecte…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/267fdd9b6530c399dfd996e1a0a7628b45baf9f0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/5337eebdf8c5d4810b1913047f078d2815d5645f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/a6f0643e4f63cfaa0d5d4a69de4f132eac4b8fe4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c76b8abce575e0c6e4096957220b4515ed847d89"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/de984ea883405420fdc416ae8964b752df586970"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c7e94dee409c2f6f674359925dc5be51023e3be25455e43a385799ae0a343bfb · sha256:70620076ae19ddee… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer