CVE-2026-68295LoongArch: BPF: Zero-extend signed ALU32 div/mod results
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero. The LoongArch JIT sign-extends the result of signed ALU32 BPF_DIV and BPF_MOD (off=1), so a negative 32-bit quotient or remainder leaves bits 63:32 set in JITted code while the verifier and interpreter model those bits as zero. Keep sign-extension on the operands, which signed divide needs, and zero-extend the ALU32 result after the divide or modulo instruction, matching the unsigned ALU32 div/mod paths and every other ALU32 operation in this JIT.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2425c9e002d2a1fdca34261b2fa6713eafef2163 before 16656c3d734693be3d8a36dbf9d09142b69f3ddc; 2425c9e002d2a1fdca34261b2fa6713eafef2163 builds before 716cb29dbed4d62e9e108950a1a82bcba4cc2d45; from 2425c9e002d2a1fdca34261b2fa6713eafef2163 before dacd348b8a993373576fe2ee2d8b114740ba57a6 | CNA record |
References
- https://git.kernel.org/stable/c/16656c3d734693be3d8a36dbf9d09142b69f3ddc
- https://git.kernel.org/stable/c/716cb29dbed4d62e9e108950a1a82bcba4cc2d45
- https://git.kernel.org/stable/c/dacd348b8a993373576fe2ee2d8b114740ba57a6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.