CVE-2026-64353

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where an ARRAY OF MAPS can utilize an array created with BPF F INNER MAP as its inner map template. A concrete inner array with a different max entries value can replace this template. Following a successful outer map lookup, the verifier uses the inner map template to represent the resulting map pointer. This causes const-key lookup nullness elision to rely on the template max entries instead of the concrete inner map max entries used by the runtime helper. Consequently, the template max entries does not guarantee that the key is within the bounds of the concrete runtime map.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.