In the Linux kernel, the following vulnerability has been resolved:
bpf: Preserve pointer state for commuted arithmetic
When scalar += pointer is handled in adjust_ptr_min_max_vals(), the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile because pointer provenance is tracked by several bpf_reg_state fields.
Use the caller's temporary offset register to preserve the scalar operand while replacing the destination with the full pointer state. This preserves the frame number for PTR_TO_STACK registers and keeps parent identity fields consistent.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-headersUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade kernel-livepatch-6.18.48-107.148Upgrade perf6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-toolsUpgrade microvm-kernel6.18Upgrade kernel6.18-modules-extraUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18-debuginfo | Sep 30, 2026 | Aug 22, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 22, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-azureUpgrade linux-image-azure-fde-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-kvm | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub