{"id":"CVE-2026-98631","revision":"e9f4d7ab4cd14e99a9a6e03ca6a0921f","records":[{"revision":"e9f4d7ab4cd14e99a9a6e03ca6a0921f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98631","aliases":[],"title":"xsk: Use a 32-bit compare in xsk_map_gen_lookup","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Use a 32-bit compare in xsk_map_gen_lookup\n\nxsk_map_gen_lookup() loads a u32 key and compares it with max_entries\nusing BPF_JMP_IMM. BPF immediates are sign-extended to 64 bits, so a\nmax_entries value of 0x80000000 or higher becomes a threshold larger\nthan every zero-extended 32-bit key. An out-of-range index then skips\nthe bounds check and the generated lookup reads past xsk_map[].\n\nCompare with BPF_JMP32_IMM so the check stays in 32-bit unsigned range.","state":0,"publishedAt":"2026-10-18T15:19:53.529+00:00","modifiedAt":"2026-10-19T09:22:59.147+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/xdp/xskmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"c6d5c582d55a8f229d75e98d62eaa065b0deb18d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"227ec890559e922e235eb543646e3bf0bd8269b0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"11d9be35c1f4233798e99be98bc474f83a254c6c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"123f90f394ca404ab8796a7c8072ff7fa5b65a9c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"36461e58f88a1b723f86693f437ac12e60ff4363\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"b5c0cff0c5331582ab01c4c423731453a8381acc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"3c1e0a4bc156b8d5c5772dbc76b9ea74dce5ca24\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e65650f291ee72fc578d6346080fc4699204ef2c\",\n                            \"lessThan\": \"70504de0bb627848667207bec7ccfd647deb8814\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/xdp/xskmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.112\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.55\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.9\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/c6d5c582d55a8f229d75e98d62eaa065b0deb18d","https://git.kernel.org/stable/c/227ec890559e922e235eb543646e3bf0bd8269b0","https://git.kernel.org/stable/c/11d9be35c1f4233798e99be98bc474f83a254c6c","https://git.kernel.org/stable/c/123f90f394ca404ab8796a7c8072ff7fa5b65a9c","https://git.kernel.org/stable/c/36461e58f88a1b723f86693f437ac12e60ff4363","https://git.kernel.org/stable/c/b5c0cff0c5331582ab01c4c423731453a8381acc","https://git.kernel.org/stable/c/3c1e0a4bc156b8d5c5772dbc76b9ea74dce5ca24","https://git.kernel.org/stable/c/70504de0bb627848667207bec7ccfd647deb8814"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98631","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98631","identifiers":["CVE-2026-98631"]},"retained":false,"historicalAffected":[]}],"coverage":[]}