Riskcovery

CVE-2026-53110

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

State
Published
Severity
7.8 High
Published
Jun 24, 2026
Updated
Oct 19, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values.

s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
LinuxLinux
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to before edc90a12073b9a530064a99945c183dde120cb99Affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to before 44c4f999b03f55debb1a0c5ab5c1796895a1adf8Affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to before 366b0e05ee24f5ba62bdc7ec1346038258b9a797Affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to before 834918a77be51419383bf1dda9f02b81ecf26b34Affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to before 202e42e4aa890172366354b233c42c73107a3f59Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.141 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.