CVE-2026-31413 | Linux Kernel up to 6.12.79/6.18.20/6.19.10/7.0-rc1/7.0-rc4 bpf maybe_fork_scalars runtime out-of-bounds

A vulnerability was found in Linux Kernel up to 6.12.79/6.18.20/6.19.10/7.0-rc1/7.0-rc4. It has been rated as critical. Affected is the function maybe_fork_scalars of the component bpf. The manipulation of the argument runtime leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-31413. The attack must be carried out from within the local network. There is no available exploit.

Upgrading the affected component is advised.