CVE-2026-72423

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where conntrack lookup and allocation kfuncs (kernel functions) process an opts pointer and an opts sz argument. While the verifier only checks the memory range defined by opts sz, the wrappers unconditionally write to opts->error when an internal helper returns an error. If an invalid size is provided that is smaller than the end of opts->error, the write operation can occur outside the memory range verified by the verifier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.