EUVD-2026-86963

In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills to STACKZERO states.c:cleanfuncstate can downgrade scalar zero spill to STACKZERO in the following case: u64 r10 - 8 = 0; ... checkpoint ... r1 = u32 r10 - 4; ... no reads from...

CVE-2026-98132

The Linux kernel bpf verifier contains a flaw in states.c:__clean_func_state() where it can incorrectly downgrade half-dead scalar zero spills to STACK_ZERO. Specifically, when 4 bytes of a 64-bit spill are dead, the verifier changes the spill to a combination of zero and poison values (0000pppp)...