CVE Explorer

CVE-2026-53036

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in check_imm signed range check check_imm(bits, imm) is used in the arm64 BPF JIT to verify that a branch displacement (in arm64 instruction units) fits into the signed N-bit immediate field of a B, B.cond or CBZ/CBNZ encoding before it is handed to the encoder. The macro currently tests for (imm > 0 && imm >> bits) || (imm < 0 && ~imm >> bits) which admits values in [-2^N, 2^N) — effectively a signe

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5aca191b6806507f377b752eb3bf78aa3690aba20ee48fe2da5c03633272ed66

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["arch/arm64/net/bpf_jit_comp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.91","versionType":"semver"},{"le…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/arm64/net/bpf_jit_comp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a5dfeb3b61065039488342d43ae06d4729d955d4","status":"affected","version":"e54bcde3d69d40023ae77727213d14f920eb264a","versionType":"git"},{"lessThan":"7fd3b41260c6120e7b60164afea5d961af6224f9","status":"affected","version":"e54bcde3d69d40023ae77727213d14f920eb264a","versionType":"git"},{"lessThan":"6927f0d6794aa73318bbfa929f1ff6065b0620df","status":"affected","version":"e54bcde3d69d4002…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/1a113b5497297871699cd498b1b83542e0db7f15"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/1dd8be4ec722ce54e4cace59f3a4ba658111b3ec"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/6927f0d6794aa73318bbfa929f1ff6065b0620df"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/7fd3b41260c6120e7b60164afea5d961af6224f9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/a5dfeb3b61065039488342d43ae06d4729d955d4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/fb74defa1cca1a73177c0c761e641332e4f979a3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b6d5fba86e9e5ae3c5e6f5a9096f0b3ebbb215432c0a74425e0586b1a19c0218 · sha256:e9234aa0efe1d4e3… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer