Linux Distros Unpatched Vulnerability : CVE-2026-92519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv, bpf: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is...

CVE-2026-92519 riscv, bpf: Fix memory leak in bpf_jit_free

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If JIT...

CVE-2026-90211

CVE-2026-90211 affects the Linux kernel on the s390x architecture. The vulnerability resides in the BPF JIT compiler's handling of read-modify-write (RMW) atomics on arena pointers. Specifically, bpf_jit_probe_atomic_pre() leaves probe->reg at -1 (the sentinel from bpf_jit_probe_init()), so wh...

CVE-2026-90195

This Linux kernel vulnerability affects the RISC-V (RV64) BPF JIT compiler . The RV64 ABI requires sign-extension for signed 1-byte and 2-byte kfunc arguments , but the JIT failed to perform this extension. The bug was previously masked by a state-pruning behavior in commit 7ce090afbf72, which in...

CVE-2026-90195 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc args. However, the RV64 JIT currently does not perform sign-extension for such...

EUVD-2026-81788

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc args. However, the RV64 JIT currently does not perform sign-extension for such...

CVE-2026-89906

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmpoffset calculation derives the jump distance from a stale prior-pass code stride, which can lead to wrong branch offsets and soft lockups under...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the network support functionality on the ARM 64-bit kernel of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit Linux operating system, is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the bpf_jit_blind_insn() function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpfjitblindinsn function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to trigger a...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102114)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102114 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in checkimm signed range check checkimmbits, imm is used in the arm64...

GO-2024-3290 vulnerabilities

Vulnerabilities for packages: cilium-fips, hubble-fips, cilium, hubble...

CVE-2026-68285

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter JIT Just-In-Time compiler for the LoongArch architecture. When JIT compilation fails for a subprogram, the bpfjitfree function does not properly release the memory allocated for the JIT context offsets array. This oversight leads t...

CVE-2026-68295

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

UBUNTU-CVE-2026-68295

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

CVE-2026-68295 LoongArch: BPF: Zero-extend signed ALU32 div/mod results

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPFDIV and BPFMOD...

Linux Distros Unpatched Vulnerability : CVE-2026-68295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The...

CVE-2026-64508

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF Just-In-Time JIT compiler. The BPF JIT allocator reuses memory space, and when new code is written, an indirect jump into the new program can reuse a branch prediction left behind by an old program. This could allow an attacker to...

AZL-93809 CVE-2026-64507 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...

CVE-2026-64508

In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs many small programs into larger executable allocations and reuses space within those allocations as programs are loaded and freed. When fresh code is...

CVE-2026-64507

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF...