Tracker / CVE-2026-53032
CVE-2026-53032
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to branch on btf_is_kernel() before checking base_type(). A scalar register stored into a kptr slot has no btf, so the btf_is_kernel(reg->btf) call dereferences NULL. Move the base_type() != PTR_TO_BTF_ID guard before any reg->btf access.
Affected products and versions
| linux | linux_kernel · 6.13 → 6.18.33 |
|---|---|
| linux | linux_kernel · 6.19 → 7.0.10 |
| linux | linux_kernel · 6.4.16 → 6.5 |
| linux | linux_kernel · 6.5.3 → 6.6.141 |
| linux | linux_kernel · 6.7 → 6.12.91 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.