Threats tagged 'ghsa-mfrq-h74g-92w2'

CVE-2026-98059 is a medium severity vulnerability in the Linux kernel's BPF subsystem involving the sched_process_wait tracepoint argument. The issue arises because the argument passed can be NULL, but the BPF verifier does not initially mark it as nullable, allowing unchecked dereference in JITed BPF code. This can lead to a NULL pointer dereference causing an availability impact. The vulnerability has been resolved by marking the argument as nullable in the verifier to prevent unsafe dereferences.