<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rbpf</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-31264: Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers</title><link>https://patchthecve.com/cve/CVE-2022-31264.html</link><guid>https://patchthecve.com/cve/CVE-2022-31264.html</guid><pubDate>Wed, 17 Jun 2026 04:45:15 +0000</pubDate><description>HIGH 7.5: Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers. elf.rs has a panic via a malformed eBPF program.</description></item><item><title>CVE-2022-23066: In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper im</title><link>https://patchthecve.com/cve/CVE-2022-23066.html</link><guid>https://patchthecve.com/cve/CVE-2022-23066.html</guid><pubDate>Wed, 17 Jun 2026 04:29:26 +0000</pubDate><description>CRITICAL 9.1: In Solana rBPF versions 0.2.26 and 0.2.27 are affected by Incorrect Calculation which is caused by improper implementation of sdiv instruction. This can lead to the wrong execution path, resulting in huge loss in specific cases. For example, the result of a sdiv instruction may decide whether to tra</description></item><item><title>CVE-2021-46102: From version 0.2.14 to 0.2.16 for Solana rBPF, function &quot;relocate&quot; in the file src/elf.rs has an integer overf</title><link>https://patchthecve.com/cve/CVE-2021-46102.html</link><guid>https://patchthecve.com/cve/CVE-2021-46102.html</guid><pubDate>Wed, 17 Jun 2026 04:14:32 +0000</pubDate><description>HIGH 7.5: From version 0.2.14 to 0.2.16 for Solana rBPF, function &quot;relocate&quot; in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable &quot;addr&quot; </description></item></channel></rss>