SB20260828107 - Improper access control in Linux kernel lib bpf

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2026-80675)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to bypass metadata integrity validation.

The vulnerability exists due to improper access control in the signed loader metadata map verification logic when validating map metadata hashes for frozen maps. A remote user can load another BPF program with access to the same metadata map to mutate its contents after hash calculation to bypass metadata integrity validation.

Exploitation requires access to a non-exclusive metadata map used by the signed loader.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0dad5adeb34b6f78a883e8faa6a1c947a240e7c9
• https://git.kernel.org/stable/c/0fb6c9ed6493b4af01be8bb0a384574eba7df636
• https://git.kernel.org/stable/c/b6862b6a25c6a925fb0b0e549ee4a52a8d2966fb