UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-98572

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPF_REG_AX, which is used for constant blinding. Fix the instruction to use the immediate form. Found with test_bpf on MIPS32r1 emulated by QEMU.

Properties

Last source
FIRST EPSS
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00205
Cve id
CVE-2026-98572
First seen by Signal
2026-10-18T18:05:58+00:00
Retrieved at
2026-10-21T01:24:51+00:00
Published at
2026-10-18T16:17:09.477
Last modified
2026-10-19T10:19:15.310
Epss percentile
0.09955

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-98572 — Ninja Signal Threat Intelligence | Ninja Signal