CVE-2026-72426

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The cleanfuncstate function, which manages stack slot cleanup, incorrectly clears metadata for pointer spills. This allows a subsequent read from a partially live stack slot to bypass crucial non-scalar register-fill...

CVE-2026-72426 bpf: Preserve pointer spill metadata during half-slot cleanup

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup cleanfuncstate cleans dead stack slots in 4-byte halves. When the high half of a STACKSPILL slot is dead and the low half remains live, cleanup converts the live low...