CVE-2026-45933
Description
A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) verifier. The sync_linked_regs() function fails to preserve the register ID during bounds propagation, which can lead to incorrect register state. This issue may allow a local attacker to trigger a 'division by zero' error, resulting in a denial of service.
Statement
This vulnerability is rated with a Low severity because exploitation requires local access and elevated capabilities, such as CAP_BPF or CAP_SYS_ADMIN, due to unprivileged eBPF being disabled by default on Red Hat Enterprise Linux. An authenticated local user possessing sufficient privileges could load a specially crafted filter program that confuses register state tracking, precipitating an unhandled division-by-zero kernel panic. The risk is restricted to system availability rather than arbitrary code execution or data exposure, and standard deployment defaults prevent unauthorized accounts from reaching the vulnerable verification logic.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | High |
| Integrity Impact | None | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
