CVE-2026-53671

Name of the Vulnerable Software and Affected Versions PREVAIL versions prior to 0.2.4

Description The abstract transformer treats writes through a T CTX-typed base register as a silent no-op. Specifically, the do mem store() function in src/crab/ebpf transformer.cpp only models T STACK stores, and the checker's T CTX bounds arm does not test AccessType::write. This allows an attacker to craft an eBPF program that overwrites a context field, such as ctx->data, reloads it as T PACKET, and dereferences an attacker-controlled address while the verifier incorrectly reports the program as safe.

Recommendations Update to version 0.2.4.