166 matches found
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation
A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...
CVE-2026-99092
A flaw was found in the Linux kernel's RISC-V architecture. An issue in the instruction patching mechanism improperly handles memory allocated for Berkeley Packet Filter Just-In-Time BPF JIT compilation under specific kernel memory configurations. A local user capable of loading BPF programs can...
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation
A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...
DEBIAN-CVE-2026-99092
In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the corekerneltext branch of patchmap on CONFIGSTRICTKERNELRWX, and...
CVE-2026-99092
In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the corekerneltext branch of patchmap on CONFIGSTRICTKERNELRWX, and...
CVE-2026-99092
The Linux kernel contains a vulnerability in the riscv architecture regarding the handling of bpf-jit execmem addresses . Specifically, the patch_map() function incorrectly assumes that the vmalloc branch is directly writable when CONFIG_STRICT_MODULE_RWX is disabled. Because bpf_prog_pack_alloc ...
EUVD-2026-109898
In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the corekerneltext branch of patchmap on CONFIGSTRICTKERNELRWX, and...
CVE-2026-99092 riscv: patch: fix handling of bpf-jit execmem addresses
In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the corekerneltext branch of patchmap on CONFIGSTRICTKERNELRWX, and...
PT-2026-123379
In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the core kernel text branch of patch map on CONFIG STRICT KERNEL RWX, and...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.10. It stems from improper handling of BPF JIT execmem addresses by riscv patchmap. When CONFIGSTRICTMODULERWX is not enabled, it returns a read-only address directly, causing subsequent calls to copytokernelnofault to trigger a page fault...
Linux Distros Unpatched Vulnerability : CVE-2026-99092
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b riscv: patch: skip fixmap mapping when kernel text is already writable gated the...
CVE-2026-92518
A flaw was found in the Linux kernel's RISC-V BPF JIT compiler. When Control-Flow Integrity CFI with Clang is enabled, an error in calculating the tail call jump offset can lead to kernel stack corruption. This issue causes the system to improperly adjust the stack pointer, which can result in...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the BPF JIT compiler generating the addu instruction instead of the addiu instruction for the immediate numerical JMP JEQ/JNE instructions in MIPS32. As a result, the immediate value 1 is interpreted as the register $at...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix an off-by-one error in the signed range check within checkimm checkimmbits, imm is used in the arm64 BPF JIT to verify that a branch displacement in arm64 instruction units fits into the signed N-bit immediate fie...
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation
A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...
kernel: x86/bugs: Enable IBPB flush on BPF JIT allocation
A flaw was found in the Linux kernel. This vulnerability involves an incomplete defense against Spectre-v2, a type of attack that can expose sensitive information by exploiting how modern processors predict future operations. Specifically, when the Berkeley Packet Filter BPF Just-In-Time JIT...
CVE-2026-92519
A flaw was found in the Linux kernel. When the BPF Just-In-Time JIT compiler processes subprograms, a memory leak can occur. If JIT compilation fails for a subprogram, the bpfjitfree function does not properly free the associated memory for the JIT context offsets array. This can lead to a gradua...
SUSE CVE-2026-97944
In the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash offset in cfigetfunchash The switch of the FineIBT preamble from "subl $hash, %r10d" to the shorter "subl $hash, %eax" moved the hash immediate from offset 7 to offset 5 of the preamble...
DEBIAN-CVE-2026-97944
In the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash offset in cfigetfunchash The switch of the FineIBT preamble from "subl $hash, %r10d" to the shorter "subl $hash, %eax" moved the hash immediate from offset 7 to offset 5 of the preamble...