CVE-2026-53036

A flaw was found in the Linux kernel. Specifically, an off-by-one error exists in the BPF (Berkeley Packet Filter) JIT (Just-In-Time) compiler when handling immediate values for branch instructions on ARM64 architectures. This vulnerability allows the system to process values outside their intended range, which can lead to incorrect program execution flow. Such an issue could potentially cause system instability or unexpected behavior.

The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.