CVE-2026-53110
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values.
s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 528eb2cb87bc1353235a6384696b4849bde8b0ba < edc90a12073b9a530064a99945c183dde120cb99 | affected |
| Linux | Linux | 528eb2cb87bc1353235a6384696b4849bde8b0ba < 44c4f999b03f55debb1a0c5ab5c1796895a1adf8 | affected |
| Linux | Linux | 528eb2cb87bc1353235a6384696b4849bde8b0ba < 366b0e05ee24f5ba62bdc7ec1346038258b9a797 | affected |
| Linux | Linux | 528eb2cb87bc1353235a6384696b4849bde8b0ba < 834918a77be51419383bf1dda9f02b81ecf26b34 | affected |
| Linux | Linux | 528eb2cb87bc1353235a6384696b4849bde8b0ba < 202e42e4aa890172366354b233c42c73107a3f59 | affected |
| Linux | Linux | 6.3 | affected |
| Linux | Linux | 0 < 6.3 | unaffected |
| Linux | Linux | 6.6.141 <= 6.6.* | unaffected |
| Linux | Linux | 6.12.91 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.33 <= 6.18.* | unaffected |
| Linux | Linux | 7.0.10 <= 7.0.* | unaffected |
| Linux | Linux | 7.1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/edc90a12073b9a530064a99945c183dde120cb99
- https://git.kernel.org/stable/c/44c4f999b03f55debb1a0c5ab5c1796895a1adf8
- https://git.kernel.org/stable/c/366b0e05ee24f5ba62bdc7ec1346038258b9a797
- https://git.kernel.org/stable/c/834918a77be51419383bf1dda9f02b81ecf26b34
- https://git.kernel.org/stable/c/202e42e4aa890172366354b233c42c73107a3f59
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.