In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

s390x ABI requires callers to zero-extend unsigned arguments and
sign-extend signed arguments, and callees to zero-extend unsigned
return values and sign-extend signed return values.

s390 BPF JIT currently implements only sign extension. Fix this
omission and implement zero extension too.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
528eb2cb87bc1353235a6384696b4849bde8b0ba affected < edc90a12073b9a530064a99945c183dde120cb99
528eb2cb87bc1353235a6384696b4849bde8b0ba affected < 44c4f999b03f55debb1a0c5ab5c1796895a1adf8
528eb2cb87bc1353235a6384696b4849bde8b0ba affected < 366b0e05ee24f5ba62bdc7ec1346038258b9a797
528eb2cb87bc1353235a6384696b4849bde8b0ba affected < 834918a77be51419383bf1dda9f02b81ecf26b34
528eb2cb87bc1353235a6384696b4849bde8b0ba affected < 202e42e4aa890172366354b233c42c73107a3f59
Linux Linux affected
Version Status Constraints
6.3 affected —
0 unaffected < 6.3
6.6.141 unaffected ≤ 6.6.*
6.12.91 unaffected ≤ 6.12.*
6.18.33 unaffected ≤ 6.18.*
7.0.10 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/202e42e4aa890172366354b233c42c73107a3f59 cve-icon
https://git.kernel.org/stable/c/366b0e05ee24f5ba62bdc7ec1346038258b9a797 cve-icon
https://git.kernel.org/stable/c/44c4f999b03f55debb1a0c5ab5c1796895a1adf8 cve-icon
https://git.kernel.org/stable/c/834918a77be51419383bf1dda9f02b81ecf26b34 cve-icon
https://git.kernel.org/stable/c/edc90a12073b9a530064a99945c183dde120cb99 cve-icon
History

Wed, 24 Jun 2026 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-194
CWE-196

Wed, 24 Jun 2026 17:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values. s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.
Title s390/bpf: Zero-extend bpf prog return values and kfunc arguments
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-24T16:30:44.036Z

Reserved: 2026-06-09T07:44:35.385Z

Link: CVE-2026-53110

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-24T20:45:03Z

Weaknesses