CVE-2026-98019

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where certain call arguments are not marked as precise. Specifically, the check func arg() function allows bpf register is null() for nullable arguments without marking the underlying scalar register as precise. Additionally, the check helper call() function enforces that the second parameter of bpf get local storage() be zero without marking the underlying scalar register as precise. In both cases, a checkpoint created on such a path could prune against an arbitrary scalar value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.