CVE-2026-98572

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPF_REG_AX, which is used for constant blinding. Fix the instruction to use the immediate form. Found with test_bpf on MIPS32r1 emulated by QEMU.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 18, 2026
First seenOct 18, 2026

How to fix

Update
  • Linux Linux1547e9f3a7d71971216e6dba30270cae13fe4e02, beeae92e70e705e90a0d6d9b3b8498ee3b92f495, 6f939529ed6c580e9b6c5daa20be67fa0b3d4cf0, 876ef04c75c2751acfd355606fca3eced71dec65, 1bd91670966a7142ac94f2cebe2b5ae6bf5cb0c8, db762fd96be225bd06161c9631160c755d891693 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxeb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < 1547e9f3a7d71971216e6dba30270cae13fe4e02, eb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < beeae92e70e705e90a0d6d9b3b8498ee3b92f495, eb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < 6f939529ed6c580e9b6c5daa20be67fa0b3d4cf0, eb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < 876ef04c75c2751acfd355606fca3eced71dec65, eb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < 1bd91670966a7142ac94f2cebe2b5ae6bf5cb0c8, eb63cfcd2ee8ec3805f6881f43341f589c3d2278 ≤ v < db762fd96be225bd06161c9631160c755d891693, 5.161547e9f3a7d71971216e6dba30270cae13fe4e02, beeae92e70e705e90a0d6d9b3b8498ee3b92f495, 6f939529ed6c580e9b6c5daa20be67fa0b3d4cf0, 876ef04c75c2751acfd355606fca3eced71dec65, 1bd91670966a7142ac94f2cebe2b5ae6bf5cb0c8, db762fd96be225bd06161c9631160c755d891693

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.