CVE-2026-80675

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the libbpf signed loader where it fails to ensure that metadata maps are exclusive. The loader verifies map->sha against the metadata hash using BPF OBJ GET INFO BY FD on a frozen map. Without exclusivity, a hostile host could allow another BPF program with map access to mutate the contents after the map is frozen, causing the validation to pass based on stale data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.