CVE-2026-53076

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read occurs during the copying of elements from a BPF MAP TYPE CGROUP STORAGE map to a per-CPU (pcpu) map when the value size is not aligned to 8 bytes. The pcpu init value() function incorrectly assumes all sources are rounded up to 8 bytes and calls copy map value long() to perform the data copy. Because the verifier checks the actual size claimed by the source rather than the kernel-rounded size, an out-of-bounds read happens if the source contains fewer bytes (e.g., 4 bytes) than the rounded copy size (8 bytes).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.