2924 matches found
CVE-2026-92519 riscv, bpf: Fix memory leak in bpf_jit_free
In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If JIT...
CVE-2026-90211
CVE-2026-90211 affects the Linux kernel on the s390x architecture. The vulnerability resides in the BPF JIT compiler's handling of read-modify-write (RMW) atomics on arena pointers. Specifically, bpf_jit_probe_atomic_pre() leaves probe->reg at -1 (the sentinel from bpf_jit_probe_init()), so wh...
CVE-2026-90211 bpf, s390: Clear fetch destination on faulting arena atomic
In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on faulting arena atomic Same missing register clear as on riscv64. A RMW atomic on an arena pointer is converted to BPFPROBEATOMIC and gets an exception table entry, but bpfjitprobeatomicpre on...
EUVD-2026-81788
In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc args. However, the RV64 JIT currently does not perform sign-extension for such...
CVE-2026-90195
This Linux kernel vulnerability affects the RISC-V (RV64) BPF JIT compiler . The RV64 ABI requires sign-extension for signed 1-byte and 2-byte kfunc arguments , but the JIT failed to perform this extension. The bug was previously masked by a state-pruning behavior in commit 7ce090afbf72, which in...
CVE-2026-90195 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc args. However, the RV64 JIT currently does not perform sign-extension for such...
PT-2026-94617
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to rewrite BPF LOAD ACQ instructions to BPF PROBE MEM loads, unlike the behavior for regular BPF LDX...
PT-2026-94827
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RISC-V BPF JIT compiler. When bpf int jit compile is called for subprograms, it may return early during the first pass, leaving ctx-offset active for a...
CVE-2026-89906
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmpoffset calculation derives the jump distance from a stale prior-pass code stride, which can lead to wrong branch offsets and soft lockups under...
DEBIAN-CVE-2026-89906
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmpoffset calculation derives the jump distance from a stale prior-pass code stride, which can lead to wrong branch offsets and soft lockups under...
CVE-2026-92021
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component...
Whetstone
Whetstone On-device JIT enabler for iOS 12 / 13, all devi...
PT-2026-93547
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch BPF implementation where the jump offset calculation for tail calls uses a macro-based approach. This method derives jump distance from a stale prior-pas...
SUSE CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
DEBIAN-CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
UBUNTU-CVE-2026-92021
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 140.16 and Thunderbird 140.16...
