CVE-2026-43306 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIG_CFI enabled, the kernel strictly enforces that indirect function calls use a function pointer type that matches the target function. I ran into the following type mismatch when running BPF self-tests: CFI failure at bpf_obj_free_fields+0x190/0x238 (target: bpf_crypto_ctx_release+0x0/0x94; expected type: 0xa488ebfc) Internal error: Oops - CFI: 00000000f2008228 [#1] SMP ... As bpf_crypto_ctx_release() is also used in BPF programs and using a void pointer as the argument would make the verifier unhappy, add a simple stub function with the correct type and register it as the destructor kfunc instead.
A vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) subsystem related to cryptographic context management has been addressed. This issue arose from a type mismatch in destructor function calls, which was identified during BPF self-tests. With CONFIG_CFI enabled, the kernel requires that indirect function calls use matching function pointer types. The mismatch led to a CFI (Control Flow Integrity) failure, causing an internal error. To resolve this, a stub function with the correct type was added and registered as the destructor kfunc, ensuring compatibility with BPF program requirements.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3979a550fe06b370d73647f59cf462fa525c9ec4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4e3e57dbf46dad3498f8c4219ce2dba756875962 | kernel.org | Patch |
| https://git.kernel.org/stable/c/50d6fd69388cc7b05dce72f09080674dcede4ac9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b40a5d724f29fc2eed23ff353808a9aae616b48a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.10, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |