CVE-2026-68295

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the LoongArch JIT (Just-In-Time) compiler within the BPF (Berkeley Packet Filter) subsystem. ALU32 operations are expected to write a 32-bit result and leave the upper 32 bits of the BPF register as zero. However, the LoongArch JIT incorrectly sign-extends the results of signed ALU32 BPF DIV and BPF MOD (off=1) operations. This causes negative 32-bit quotients or remainders to leave bits 63:32 set in the JITted code, creating a discrepancy with the verifier and interpreter, which model those bits as zero.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.