CVE-2026-53031
bpf: Validate node_id in arena_alloc_pages()
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it through the entire allocation chain without any bounds checking. Validate node_id before passing it down the allocation chain in arena_alloc_pages().
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Jun 24, 2026 |
| Last Updated | Jun 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Linux / Linux
317460317a02a1af512697e6e964298dedd8a163 < 31d3b4b28e55835646d6829d60023f730dd34e85 317460317a02a1af512697e6e964298dedd8a163 < e15900888c09480a4c632bc598f1c5bd39bed6d6 317460317a02a1af512697e6e964298dedd8a163 < fb66e20130f95a93ffea1677252526a9e39170b2 317460317a02a1af512697e6e964298dedd8a163 < 2845989f2ebaf7848e4eccf9a779daf3156ea0a5
Linux / Linux
6.9
References
git.kernel.org: https://git.kernel.org/stable/c/31d3b4b28e55835646d6829d60023f730dd34e85 git.kernel.org: https://git.kernel.org/stable/c/e15900888c09480a4c632bc598f1c5bd39bed6d6 git.kernel.org: https://git.kernel.org/stable/c/fb66e20130f95a93ffea1677252526a9e39170b2 git.kernel.org: https://git.kernel.org/stable/c/2845989f2ebaf7848e4eccf9a779daf3156ea0a5