3 matches found
CVE-2026-98042
The Linux kernel contains a vulnerability in the bpf subsystem where check_cond_jmp_op() incorrectly handles snapshots of compared registers. Specifically, collect_linked_regs() might call clear_scalar_id() on the compared register if it exceeds the LINKED_REGS_MAX limit. Because the register is ...
EUVD-2026-86695
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...
CVE-2026-98042
In the Linux kernel, the following vulnerability has been resolved: bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs runs and copies those snapshots back into both branch states afterwards...