CVE-2026-72402

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF verifier logs where the print bpf insn() function fails to mask certain pointer-bearing pseudo sources when pointer leaks are restricted. While the function masks BPF PSEUDO MAP FD and BPF PSEUDO MAP VALUE, it does not cover BPF PSEUDO MAP IDX, BPF PSEUDO MAP IDX VALUE, and BPF PSEUDO BTF ID. These values can be resolved to kernel pointer values before the verifier log prints the instruction, potentially leaking sensitive memory addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.