CVE-2026-72402
Received Received - Intake

BPF Verifier Pointer Leak in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs print_bpf_insn() masks ldimm64 immediates for pointer-bearing pseudo sources when pointer leaks are not allowed, but the mask only covers BPF_PSEUDO_MAP_FD and BPF_PSEUDO_MAP_VALUE. BPF_PSEUDO_MAP_IDX, BPF_PSEUDO_MAP_IDX_VALUE, and BPF_PSEUDO_BTF_ID can also be resolved to kernel pointer values before the verifier log prints the instruction. Include them in the existing pointer classification so the log prints 0x0 instead of the rewritten address.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72402
EUVD
EUVD-2026-59301

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the BPF verifier logs not properly masking pseudo pointer values. When pointer leaks are restricted, the logs should show 0x0 instead of actual kernel pointer values for certain pseudo instructions like BPF_PSEUDO_MAP_IDX or BPF_PSEUDO_BTF_ID. This could expose sensitive memory addresses in logs.

Impact Analysis

An attacker with access to kernel logs could exploit this to leak kernel memory addresses. This information might help in bypassing security mechanisms like KASLR or crafting further exploits targeting the kernel.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve this vulnerability. Monitor kernel logs for BPF verifier warnings or errors that may indicate exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72402. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart