HomeDefectsLIN1023-35262
Fixed

LIN1023-35262 : Security Advisory - linux - CVE-2026-98376

Created: Oct 9, 2026    Updated: Oct 13, 2026
Resolved Date: Oct 10, 2026
Found In Version: 10.23.30.2
Fix Version: 10.23.30.8
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  bpf: Use array_map_meta_equal for percpu array inner map replacement  percpu_array_map_ops.map_meta_equal points to the generic bpf_map_meta_equal(), which does not compare max_entries.  When a percpu array serves as an inner map, replacing it with one that has fewer max_entries bypasses the check.  Since percpu_array_map_gen_lookup() inlines the original template's index_mask as a JIT immediate, a lookup on the replacement map can access pptrs[] out of bounds.  Point percpu_array_map_ops.map_meta_equal to array_map_meta_equal(), which already enforces the max_entries equality check.  Add a selftest to verify that replacing a percpu array inner map with a differently-sized one is rejected.