CVE-2026-98132

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where the clean func state() function in states.c can incorrectly downgrade a scalar zero spill to STACK ZERO. This occurs when a portion of the stack memory is considered dead, causing the verifier to change the scalar spill to a combination of zero and poison values. This behavior breaks precision propagation chains, which are mechanisms used by the verifier to track the known bits of a register to ensure memory safety.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.