CVE-2026-72428

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where the check stack write fixed off() function incorrectly calculates the byte slot for fixed-offset stack writes. While the write path records bytes in slot type[] using (slot - i) % BPF REG SIZE, the Spectre v4 sanitization pre-check incorrectly uses slot type[i]. This discrepancy can lead to a situation where the pre-check fails to identify bytes that require sanitization, potentially leaving writes without the necessary nospec result protection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.