In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer
In check_alu_op(), the verifier currently calls check_reg_arg() and adjust_scalar_min_max_vals() unconditionally for BPF_NEG operations. However, if the destination register holds a pointer, these scalar adjustments are unnecessary and potentially incorrect.
This patch adds a check to skip the adjustment logic when the destination register contains a pointer.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-aws-6.17Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-generic-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-oracleUpgrade linux-image-generic-64k-6.17Upgrade linux-image-azureUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-oem-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-raspiUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1007-gcp-64k | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub