UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-98572
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPF_REG_AX, which is used for constant blinding. Fix the instruction to use the immediate form. Found with test_bpf on MIPS32r1 emulated by QEMU.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00205
- Cve id
- CVE-2026-98572
- First seen by Signal
- 2026-10-18T18:05:58+00:00
- Retrieved at
- 2026-10-21T01:24:51+00:00
- Published at
- 2026-10-18T16:17:09.477
- Last modified
- 2026-10-19T10:19:15.310
- Epss percentile
- 0.09955
Explore deeper with Ninja Signal's threat intelligence graph