CVE-2026-63926

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bpf msg push data() function within the sockmap component of the BPF (Berkeley Packet Filter) subsystem. When data is inserted into the middle of a scatterlist entry, the function splits the original entry into left and right fragments. The right fragment offset is incorrectly advanced using the message-global insertion point start instead of the fragment-local delta. This results in an inconsistent split layout for insertions occurring in any scatterlist entry other than the first one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.