CVE-2026-98383
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH with bpf_lwt_seg6_adjust_srh() and then call bpf_skb_pull_data(). The latter may reallocate skb->head, leaving the per-CPU SRH pointer dangling. Post-program SRH validation then writes through that pointer. Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL programs so the verifier rejects this unsafe helper combination. Other LWT program types continue to expose the helper through lwt_out_func_proto().
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Oct 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
004d4b274e2a1a895a0e5dc66158b90a7d463d44 < 0f38472a2aa8704a6b514c0dfa9c32f3672b8f32 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < cae8674489f26edf7553fdd660599466cbb4c32f 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < 9f9e57b5a3a033f95f49ef9d541340cdbcb80abb 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < df0072be6fc373cb22f9ea854d458b04e32a03cf 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < b9bb0e735460751b620156f800a4279a28573392 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < 37b18688cd18fd86d2f35c212df1611862a26cd5 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < fca71ead7a20290af1e2046983eeafae43d21af1 004d4b274e2a1a895a0e5dc66158b90a7d463d44 < e4a62833adff6ef0fe7c0b90393204fe3c26b5c5
Linux / Linux
4.18
References
git.kernel.org: https://git.kernel.org/stable/c/0f38472a2aa8704a6b514c0dfa9c32f3672b8f32 git.kernel.org: https://git.kernel.org/stable/c/cae8674489f26edf7553fdd660599466cbb4c32f git.kernel.org: https://git.kernel.org/stable/c/9f9e57b5a3a033f95f49ef9d541340cdbcb80abb git.kernel.org: https://git.kernel.org/stable/c/df0072be6fc373cb22f9ea854d458b04e32a03cf git.kernel.org: https://git.kernel.org/stable/c/b9bb0e735460751b620156f800a4279a28573392 git.kernel.org: https://git.kernel.org/stable/c/37b18688cd18fd86d2f35c212df1611862a26cd5 git.kernel.org: https://git.kernel.org/stable/c/fca71ead7a20290af1e2046983eeafae43d21af1 git.kernel.org: https://git.kernel.org/stable/c/e4a62833adff6ef0fe7c0b90393204fe3c26b5c5