CVE-2026-98132

In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACKZERO states.c:cleanfuncstate can downgrade scalar zero spill to STACKZERO in the following case: u64 r10 - 8 = 0; ... checkpoint ... r1 = u32 r10 - 4; ... no reads from...

CVE-2026-98132

A flaw exists in the Linux kernel 's Berkeley Packet Filter (BPF) verifier, specifically within the states.c:__clean_func_state() function. The vulnerability occurs when the verifier incorrectly downgrades a half-dead scalar zero spill to STACK_ZERO because a portion of the stack memory is consid...