CVE-2026-98631

In the Linux kernel, the following vulnerability has been resolved:

xsk: Use a 32-bit compare in xsk map gen lookup

xsk map gen lookup() loads a u32 key and compares it with max entries using BPF JMP IMM. BPF immediates are sign-extended to 64 bits, so a max entries value of 0x80000000 or higher becomes a threshold larger than every zero-extended 32-bit key. An out-of-range index then skips the bounds check and the generated lookup reads past xsk map[].

Compare with BPF JMP32 IMM so the check stays in 32-bit unsigned range.