Live › vulnerability › CVE-2026-98572
Go to dashboardThe Linux kernel's BPF JIT for MIPS32 emitted an addu instruction instead of addiu for immediate JEQ/JNE jumps, so a negative immediate value was compared incorrectly. The sources do not say that an attacker can use this to run code or read data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running the Linux kernel on MIPS32 with BPF JIT enabled may be affected. The sources do not say which kernel versions are impacted or whether the flaw is reachable by unprivileged users.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix immediate JMP JEQ/JNE on MIPS32
An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPF_REG_AX, which is used for constant blinding.
Fix the instruction to use the immediate form.
Found with test_bpf on MIPS32r1 emulated by QEMU.
This page as .md · .json · in your agent: get_signal("CVE-2026-98572")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.