CVE-2026-80865
Received Received - Intake

BPF Missing access_ok Check in copy_user_syms

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_syms As reported by sashiko we use __get_user without prior access_ok call on the user space pointer. Adding the missing call for the whole pointer array. Plus removing the err check in the error path, because it's not needed and also we can return -ENOMEM directly from the first kvmalloc_array fail path. [1] https://lore.kernel.org/bpf/20260611115503.AC16D1F00893@smtp.kernel.org/

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80865
EUVD
EUVD-2026-71495

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing access_ok call before using __get_user to access user space memory in the BPF subsystem. The issue occurs when copying user symbols, where the kernel fails to verify if the user space pointer is valid before dereferencing it, potentially allowing unauthorized memory access.

Detection Guidance

This vulnerability is specific to the Linux kernel's BPF component and requires kernel-level inspection. Detection involves checking kernel logs for BPF-related errors or examining kernel source code for the missing access_ok call in copy_user_syms. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow an attacker with local access to read or write arbitrary kernel memory, leading to privilege escalation, denial of service, or information disclosure. Systems running vulnerable Linux kernel versions are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel memory access issue without documented impact on data protection or privacy controls.

Mitigation Strategies

Update your Linux kernel to the latest patched version that includes the fix for this BPF vulnerability. Monitor kernel.org or your distribution's security advisories for the patched release.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80865. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart