cveboard RSS feed

CVE-2026-90195

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args On RV64, the ABI requires sign-extension for signed 1-byte and 2-byte kfunc args. However, the RV64 JIT currently does not perform sign-extension for such kfunc args. Before commit 7ce090afbf72 ("bpf: Infer zext_dst based on static register liveness analysis"), state pruning could potentially omit zero-extension of 32-bit subregisters, which inadvertently masked the above issue by making the args appear as if they had been properly sign-extended. After that commit, the problem is exposed, causing the kfunc_call/kfunc_call_test4 selftest to fail. Fix this by extending the existing sign-extension logic to handle signed 1-byte and 2-byte kfunc args as well.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
443574b033876c85a35de4c65c14f7fe092222b2affectedgit555fc6f1caf00ce7005e732b688da26c0dc3c5c5UnavailableNone listed
443574b033876c85a35de4c65c14f7fe092222b2affectedgit801ae90f8ce099187e6224cec7d72d07a4df0324UnavailableNone listed
443574b033876c85a35de4c65c14f7fe092222b2affectedgit71dbd143be598954ae103feadd12692aeb0f2f88UnavailableNone listed
443574b033876c85a35de4c65c14f7fe092222b2affectedgitf2aaa621591093cfe8224a25ef2f04a3b1e304b0UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.9affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver6.9UnavailableNone listed
6.12.110unaffectedsemverUnavailable6.12.*None listed
6.18.52unaffectedsemverUnavailable6.18.*None listed
7.2.6unaffectedsemverUnavailable7.2.*None listed
7.3unaffectedoriginal_commit_for_fixUnavailable*None listed