bpf verifier

CVE-2026-43321 is a newly published Linux kernel vulnerability in the BPF verifier, disclosed through kernel.org and surfaced in Microsoft’s Security Update Guide on May 8, 2026, with a high CVSS 3.1 score of 7.8 and local, low-complexity exploitation characteristics. The bug is small in code...

The Linux kernel received a surgical but important fix for a subtle BPF verifier bug that could cause verifier failures and kernel warnings when eBPF programs accessed an implicit padding field inside the bpf_sock_addr context; the upstream patch explicitly tightens validation in...