CVE-2024-26885 bpf: Fix DEVMAP_HASH overflow check on 32

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address bpf Overflow Checks On February 18, 2026, Microsoft published information regarding three CVEs related to the bpf (Berkeley Packet Filter) subsystem. The vulnerabilities, CVE-2024-26885, CVE-2024-26884, and CVE-2024-26883, involve overflow checks on DEVMAP_HASH, hashtab, and stackmap, respectively, all affecting 32-bit systems. These vulnerabilities were officially published on April 17, 2024. 4 sources 47