Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64548

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() When the scatterlist ring is full or nearly full, bpf_msg_push_data() enters a copy fallback path and computes copy + len for the page allocation size. Since len comes from BPF with arg3_type = ARG_ANYTHING and both are u32, a crafted len can wrap the sum to a small value, causing an undersized allocation followed by an out-of-bounds memcpy. BUG: unable to ha
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:bd09713a15ad568a7ae0311b38262d618defc1cafdc104a4bd20db2ae7a3839d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f1644c9508d24f50dd9e8ebe8d3ba86e0996d2f5","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f93b8efbabe28","versionType":"git"},{"lessThan":"a12b1575f9feabd91695a9e9d004862f7195fa25","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f93b8efbabe28","versionType":"git"},{"lessThan":"ff39d0e3b4feeb65ca43c453d7c75fdf872ded0d","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrE…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f1644c9508d24f50dd9e8ebe8d3ba86e0996d2f5","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f93b8efbabe28","versionType":"git"},{"lessThan":"a12b1575f9feabd91695a9e9d004862f7195fa25","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f93b8efbabe28","versionType":"git"},{"lessThan":"ff39d0e3b4feeb65ca43c453d7c75fdf872ded0d","status":"affected","version":"6fff607e2f14bd7c63c06c464a6f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/filter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrE…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.4,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0c0a8ed85349dae298712d79cb276acfeb794d82"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/4e40056bb5c829f0423f0a6694a0477726d2147e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/888706a76286c547bd035432602571e8024b5305"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a12b1575f9feabd91695a9e9d004862f7195fa25"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/bd004716ba75fed6d185795c85cdc92540ebeaab"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/db77b6bb6e6edb79b10b4efcce346eec5582d588"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f1644c9508d24f50dd9e8ebe8d3ba86e0996d2f5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ff39d0e3b4feeb65ca43c453d7c75fdf872ded0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f2ce0586fea95356f25f48e3cccb2d355b19f6d51d2f8d4488d6370f80feb0f4 · sha256:7167d3a1ab9f6618… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer