CVE-2026-80865

CVE-2026-80865

published September 4, 2026

CVSS
—
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Add missing access_ok call to copy_user_syms

As reported by sashiko we use __get_user without prior access_ok call on the

user space pointer. Adding the missing call for the whole pointer array.

Plus removing the err check in the error path, because it's not needed and

also we can return -ENOMEM directly from the first kvmalloc_array fail path.

[1] https://lore.kernel.org/bpf/[email protected]/

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Published
2026-09-04T21:16Z
References (6)
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 04 SEP 16:48Z
    bpf: Add missing access_ok call to copy_user_syms
    cvelistv5