CVE-2026-93043

Summary

In the Linux kernel, the following vulnerability has been resolved:

bpf: Disallow interpreter fallback for gotox insn

The interpreter does not recognize the BPF_JMP|BPF_JA|BPF_X insn, which is used for insn_array map. Thereafter, it would hit the BUG_ON() in ___bpf_prog_run() at run time.

[ 2.563726] BPF interpreter: unknown opcode 0d (imm: 0x0) [ 2.564557] ————[ cut here ]———— [ 2.565206] kernel BUG at kernel/bpf/core.c:2349! [ 2.565882] Oops: invalid opcode: 0000 [#1] SMP PTI

Set jit_required as true when insn_array map is used in the prog in order to disallow interpreter fallback for gotox insn in core.c::__bpf_prog_select_runtime().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux493d9e0d608339a32f568504d5fd411a261bb0af < 17da80d0c7b56579476b6644120bcfea778e531aaffected
LinuxLinux493d9e0d608339a32f568504d5fd411a261bb0af < 905f716362e1186c1a23447ca279e6d21f795cdbaffected
LinuxLinux6.19affected
LinuxLinux0 < 6.19unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References