A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 5.5 · linux, fedoraproject, redhatNVD modified 2026-10-08 21:17
Affected (CPE criteria) 7
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
References 4
- https://bugzilla.redhat.com/show_bug.cgi?id=2010090 Issue Tracking, Third Party Advisory
- https://lore.kernel.org/bpf/20210902185229.1840281-1-johan.almbladh%40anyfinetworks.com/
- https://bugzilla.redhat.com/show_bug.cgi?id=2010090 Issue Tracking, Third Party Advisory
- https://lore.kernel.org/bpf/20210902185229.1840281-1-johan.almbladh%40anyfinetworks.com/