Threats tagged 'ghsa-wmcq-6rpv-m375'

A medium severity vulnerability (CVE-2026-98049) in the Linux kernel's BPF subsystem involves improper zero extension handling of a 32-bit compare-and-exchange (cmpxchg) operation on arena pointers. This flaw arises because the is_cmpxchg_insn() function only matches BPF_ATOMIC mode, missing zero extension adjustments needed for BPF_PROBE_ATOMIC mode. The issue has been resolved by adjusting the matching logic to include BPF_PROBE_ATOMIC. The vulnerability affects specific Linux kernel versions listed and has no known exploits in the wild.