40 matches found
CVE-2026-98869
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
CVE-2026-98869 bpf: Infer zext_dst based on static register liveness analysis
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
CVE-2026-98869
The Linux kernel contains a vulnerability in the BPF verifier 's 32-bit operations zero extension logic, specifically affecting the s390 architecture . The issue arises because the verifier fails to correctly track whether the upper halves of 64-bit registers are alive. A regression in the livene...
EUVD-2026-107288
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
PT-2026-120636
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext dst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
SUSE CVE-2026-98049
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
DEBIAN-CVE-2026-98049
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
CVE-2026-98049
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
UBUNTU-CVE-2026-98049
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
CVE-2026-98049 bpf: zero extend the result of an arena 32-bit cmpxchg
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
EUVD-2026-86702
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
CVE-2026-98049
A vulnerability exists in the Linux kernel BPF (Berkeley Packet Filter) subsystem where the is_cmpxchg_insn() function fails to match BPF_PROBE_ATOMIC mode. When performing a 32-bit atomic compare-and-exchange operation on an arena pointer, the kernel fails to emit an explicit zero extension for ...
CVE-2026-98049 bpf: zero extend the result of an arena 32-bit cmpxchg
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
CVE-2026-98049: Incorrect Conversion between Numeric Types
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
Linux Distros Unpatched Vulnerability : CVE-2026-98049
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX |...
PT-2026-98712
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the is cmpxchg insn function only matches BPF ATOMIC mode. When bpf convert ctx accesses rewrites an atomic operation on...
CVE-2026-98049
In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 32-bit cmpxchg bpfconvertctxaccesses rewrites an atomic on an arena pointer from BPFSTX | BPFATOMIC to BPFSTX | BPFPROBEATOMIC, and it runs before bpfoptsubregzextlo32rndhi32. That pass emi...
CVE-2026-50185
A flaw was found in the cmov component of RustCrypto. The aarch64 implementations of Cmov and CmovEq incorrectly assume that high bits are zero-extended when loading values smaller than a register. This can lead to incorrect output when certain high bits are set in a Cmov selector or in the u16 a...
CVE-2026-68295
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...
CVE-2026-68295
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...