CVE-2026-98572

NONE
—CVSS v3
—CVSS v2
0.21% EPSS (exploit probability)
—CWE

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix immediate JMP JEQ/JNE on MIPS32

An addu instruction was emitted instead of addiu, causing the immediate
value 1 to be interpreted as register $at. This made the comparison
result invalid when the immediate operand was negative. Note that $at
is mapped to BPF_REG_AX, which is used for constant blinding.

Fix the instruction to use the immediate form.

Found with test_bpf on MIPS32r1 emulated by QEMU.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references