CVE-2026-53032
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to branch on btf_is_kernel() before checking base_type(). A scalar register stored into a kptr slot has no btf, so the btf_is_kernel(reg->btf) call dereferences NULL. Move the base_type() != PTR_TO_BTF_ID guard before any reg->btf access.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJun 24, 2026
First seenJun 24, 2026
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- linux linux_kernel6.5, 6.6.141, 6.12.91, 6.18.33, 7.0.10 or later
Patches
- git.kernel.org/stable/c/0a36c1f72888bca0237295a4da19cd91821a90be
- git.kernel.org/stable/c/4d0a375887ab4d49e4da1ff10f9606cab8f7c3ad
- git.kernel.org/stable/c/520454e839710c327808c2fcc98e28cee77355fc
- git.kernel.org/stable/c/6982653ce5f119982aa58f1af58e7bfbebf39252
- git.kernel.org/stable/c/da1d615ce49a47986a8864e2371a26e97861085c
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.4.16 ≤ v < 6.5, 6.5.3 ≤ v < 6.6.141, 6.7 ≤ v < 6.12.91, 6.13 ≤ v < 6.18.33, 6.19 ≤ v < 7.0.10 | 6.5, 6.6.141, 6.12.91, 6.18.33, 7.0.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.