SUSE CVE-2026-26247

Gitea versions before 1.25.5 do not persist the OAuth2 PKCE S256 challenge method correctly during authorization, allowing token exchange without the expected verifier check...

Towards Tackling Application Logic Flaws through Autonomous Formal-Logic Modeling and Automated Reasoning

Logic flaws pose significant challenges in the design and implementation of modern, semantically rich systems and applications, impacting security, privacy, and trust. These flaws are inherently tied to business-specific semantics and threat models, making their discovery and reasoning difficult...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the visitinsn function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the lack of checks for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

aeBPF2-analysis

aeBPF2, eBPF verifier scalar-ID pruning vulnerability 한국어 문서...

Linux kernel BPF verifier function Data Compromise

The vulnerability of the checkscalarids function in the kernel/bpf/verifier.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the functions checkldabs and visitinsn in the kernel/bpf/verifier.c module of the Linux operating system’s kernel relates to the improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the adjustregminmaxvals function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel BPF Heap Buffer Overflow DoS

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the checkCondjmpop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to trigger a service failure...

GO-2026-6342 Gitea OAuth2 PKCE S256 verifier bypass in code.gitea.io/gitea

Gitea OAuth2 PKCE S256 verifier bypass in code.gitea.io/gitea...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53670

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime eBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4 , the verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag . Because ALU32 arithmetic zero-extends the 32-bit result, the ...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

EUVD-2026-70245

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

EUVD-2026-70244

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...