CVE-2026-53670

PREVAIL , a polynomial-runtime eBPF verifier using an abstract interpretation layer, is vulnerable to a verifier bypass prior to version 0.2.4 . In the EbpfTransformer::add() function, offset-variable updates are silently skipped when the destination register carries a non-singleton typeset (two ...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...