InfoSec Signals™
Sign InStart Free
Back to CVE records
High 7.8Published Jun 24, 2026

CVE-2026-53110s390/bpf: Zero-extend bpf prog return values and kfunc arguments

Updated under an hour ago ()

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values. s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.

CVSS
7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-190
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 19, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 528eb2cb87bc1353235a6384696b4849bde8b0ba before edc90a12073b9a530064a99945c183dde120cb99; 528eb2cb87bc1353235a6384696b4849bde8b0ba builds before 44c4f999b03f55debb1a0c5ab5c1796895a1adf8; 528eb2cb87bc1353235a6384696b4849bde8b0ba builds before 366b0e05ee24f5ba62bdc7ec1346038258b9a797; from 528eb2cb87bc1353235a6384696b4849bde8b0ba before 834918a77be51419383bf1dda9f02b81ecf26b34; 528eb2cb87bc1353235a6384696b4849bde8b0ba builds before 202e42e4aa890172366354b233c42c73107a3f59
CNA record
linux linux_kernel
linux:linux_kernel
from 6.3 before 6.6.141; from 6.7 before 6.12.91; from 6.13 before 6.18.33; from 6.19 before 7.0.10
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.