In the Linux kernel, the following vulnerability has been resolved:
bpf: Preserve pointer state for commuted arithmetic
When scalar += pointer is handled in adjust_ptr_min_max_vals(), the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile because pointer provenance is tracked by several bpf_reg_state fields.
Use the caller's temporary offset register to preserve the scalar operand while replacing the destination with the full pointer state. This preserves the frame number for PTR_TO_STACK registers and keeps parent identity fields consistent.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool6.18Upgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.18Upgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-toolsUpgrade perf6.18Upgrade kernel6.18-modules-extraUpgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-headersUpgrade kernel6.18-develUpgrade kernel6.18-modules-extra-common | Sep 30, 2026 | Aug 22, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 22, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-aws-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-generic-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-intelUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-198-generic | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub