https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:32:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-45838 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: fix end-of-list detection in cgroup_storage_get_next_key()</p> <p>list_next_entry() never returns NULL -- when the current element is the last entry it wraps to the list head via container_of(). The subsequent NULL check is therefore dead code and get_next_key() never returns -ENOENT for the last element, instead reading storage-&gt;key from a bogus pointer that aliases internal map fields and copying the result to userspace.</p> <p>Replace it with list_entry_is_head() so the function correctly returns -ENOENT when there are no more entries.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bpf: fix end-of-list detection in cgroup_storage_get_next_key()</p> <p>list_next_entry() never returns NULL -- when the current element is the last entry it wraps to the list head via container_of(). The subsequent NULL check is therefore dead code and get_next_key() never returns -ENOENT for the last element, instead reading storage-&gt;key from a bogus pointer that aliases internal map fields and copying the result to userspace.</p> <p>Replace it with list_entry_is_head() so the function correctly returns -ENOENT when there are no more entries.</p> https://vulnerability.circl.lu/vuln/cve-2026-45838