CVE-2026-53031 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() arena_alloc_pages() accepts a plain int node_id and forwards it through the entire allocation chain without any bounds checking. Validate node_id before passing it down the allocation chain in arena_alloc_pages().
A vulnerability exists in the Linux kernel's BPF (Berkeley Packet Filter) subsystem, specifically within the arena allocation function. The issue arises because the function accepts a plain integer node ID and forwards it through the entire allocation process without proper bounds checking. This lack of validation could potentially lead to incorrect memory allocation or manipulation. The vulnerability has been addressed by implementing checks to ensure the node ID is valid before it is passed down the allocation chain.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2845989f2ebaf7848e4eccf9a779daf3156ea0a5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/31d3b4b28e55835646d6829d60023f730dd34e85 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e15900888c09480a4c632bc598f1c5bd39bed6d6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fb66e20130f95a93ffea1677252526a9e39170b2 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.9, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 24, 2026 | New CVE Received | kernel.org |