Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-53110

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

Description

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values. s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to < edc90a12073b9a530064a99945c183dde120cb99affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to < 44c4f999b03f55debb1a0c5ab5c1796895a1adf8affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to < 366b0e05ee24f5ba62bdc7ec1346038258b9a797affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to < 834918a77be51419383bf1dda9f02b81ecf26b34affected
  • 528eb2cb87bc1353235a6384696b4849bde8b0ba to < 202e42e4aa890172366354b233c42c73107a3f59affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References