{"id":"CVE-2026-98019","revision":"b0b50b31388141ea9cb27f223a43aad7","records":[{"revision":"b0b50b31388141ea9cb27f223a43aad7","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98019","aliases":[],"title":"bpf: mark a NULL call argument precise","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: mark a NULL call argument precise\n\ncheck_func_arg() allows bpf_register_is_null() for nullable arguments\nw/o marking the underlying scalar register precise. Hence a checkpoint\ncreated on such a path would prune against arbitrary scalar value.\n\ncheck_helper_call() enforces second parameter of the\nbpf_get_local_storage() to be zero, w/o marking the underlying scalar\nregister precise. Hence a checkpoint created on such a path would\nprune against arbitrary scalar value.\n\nGrouping these two into one patch, as they share the same fixes tag.","state":0,"publishedAt":"2026-09-25T10:23:40.303+00:00","modifiedAt":"2026-10-21T12:54:04.1+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/verifier.c\",\n                        \"tools/testing/selftests/bpf/progs/verifier_subprog_precision.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"b5dc0163d8fd78e64a7e21f309cf932fda34353e\",\n                            \"lessThan\": \"febbb66e682d8328f7c5bcbdd5e4291abab2e858\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b5dc0163d8fd78e64a7e21f309cf932fda34353e\",\n                            \"lessThan\": \"627089c278df58749f25686c6a3caf7e181b5951\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b5dc0163d8fd78e64a7e21f309cf932fda34353e\",\n                            \"lessThan\": \"b1fe6379e401b8ce0f561cb4d84af2b70b4343c3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b5dc0163d8fd78e64a7e21f309cf932fda34353e\",\n                            \"lessThan\": \"69a9ad004ccf5d45e534c7d503f47f643abe64b7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b5dc0163d8fd78e64a7e21f309cf932fda34353e\",\n                            \"lessThan\": \"1a3a10b030c96ea88868ccc060a16827c01eaa5a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/verifier.c\",\n                        \"tools/testing/selftests/bpf/progs/verifier_subprog_precision.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.114\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.57\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.7\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/febbb66e682d8328f7c5bcbdd5e4291abab2e858","https://git.kernel.org/stable/c/627089c278df58749f25686c6a3caf7e181b5951","https://git.kernel.org/stable/c/b1fe6379e401b8ce0f561cb4d84af2b70b4343c3","https://git.kernel.org/stable/c/69a9ad004ccf5d45e534c7d503f47f643abe64b7","https://git.kernel.org/stable/c/1a3a10b030c96ea88868ccc060a16827c01eaa5a"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98019","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98019","identifiers":["CVE-2026-98019"]},"retained":false,"historicalAffected":[]}],"coverage":[]}