CVE-2026-98048bpf: don't rewrite bpf_fastcall patterns entered by a jump
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpf_fastcall patterns entered by a jump mark_fastcall_pattern_for_call() must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by bpf_remove_fastcall_spills_fills() is not sound. Record the instructions targeted by jumps in insn_aux_data[*].jump_target when the CFG is built and use this flag to stop growing a pattern at such an instruction. Jumps to the first spill are fine. Note that existing insn_aux_data[*].jmp_point field can't be reused, as it marks subprogram return instructions.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5b5f51bff1b66cedb62b5ba74a1878341204e057 before c4d3bdb3ab211dcfad734b02e06fcb12adb4757f; from 5b5f51bff1b66cedb62b5ba74a1878341204e057 before 24adbc2c3bbe3385ce922587e1f8e837a68b3e25; 5b5f51bff1b66cedb62b5ba74a1878341204e057 builds before 0b1c83dc3c4401cd7e846548f62e3caf3d06742e | CNA record |
References
- https://git.kernel.org/stable/c/c4d3bdb3ab211dcfad734b02e06fcb12adb4757f
- https://git.kernel.org/stable/c/24adbc2c3bbe3385ce922587e1f8e837a68b3e25
- https://git.kernel.org/stable/c/0b1c83dc3c4401cd7e846548f62e3caf3d06742e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.