CVE-2026-98019
Received Received - Intake

BPF NULL Argument Handling Flaw in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise check_func_arg() allows bpf_register_is_null() for nullable arguments w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitrary scalar value. check_helper_call() enforces second parameter of the bpf_get_local_storage() to be zero, w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitrary scalar value. Grouping these two into one patch, as they share the same fixes tag.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98019
EUVD
EUVD-2026-86672

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of NULL arguments in BPF (Berkeley Packet Filter) functions. The issue allows a checkpoint created on a path with a nullable argument to prune against arbitrary scalar values, potentially leading to incorrect behavior or security bypasses.

Impact Analysis

This vulnerability could allow an attacker to manipulate BPF programs to bypass security checks or cause unexpected behavior in the kernel. If exploited, it may lead to privilege escalation, denial of service, or unauthorized access to system resources.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the bpf_register_is_null() and check_helper_call() issues described in CVE-2026-98019.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98019. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart