CVE-2026-45886

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the prototype for the bpf xdp store bytes() function is incorrect. The verifier incorrectly expects the third argument to be of type ARG PTR TO UNINIT MEM, which includes a MEM WRITE flag. When the third argument points to a read-only map (such as those using BPF F RDONLY PROG), the verifier triggers a failure because it detects a forbidden write access. Additionally, the use of ARG PTR TO UNINIT MEM could potentially lead to the helper reading from uninitialized memory. The issue is handled within the check mem size reg() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.