CVE-2026-53092

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) verifier regarding linked register delta tracking. When the source register src reg and destination register dst reg are pointers to the same bpf reg state within the adjust reg min max vals() function, the destination register is modified in-place. Consequently, subsequent calls to is reg const(src reg) and reg const value(src reg) read the value after the addition or subtraction instead of the original source value. This results in an incorrect delta that sync linked regs() propagates to linked registers, leading to a mismatch between the verifier and the actual runtime behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.