PT-2026-51986 · Linux · Linux
Published
2026-06-24
·
Updated
2026-06-24
·
CVE-2026-53092
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix linked reg delta tracking when src reg == dst reg
Consider the case of rX += rX where src reg and dst reg are pointers to
the same bpf reg state in adjust reg min max vals(). The latter first
modifies the dst reg in-place, and later in the delta tracking, the
subsequent is reg const(src reg)/reg const value(src reg) reads the
post-{add,sub} value instead of the original source.
This is problematic since it sets an incorrect delta, which sync linked regs()
then propagates to linked registers, thus creating a verifier-vs-runtime
mismatch. Fix it by just skipping this corner case.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux