CVE-2026-53081

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) verifier. This vulnerability occurs due to inconsistent base ID mapping when the regsafe() function compares scalar registers with BPF_ADD_CONST values. This inconsistency allows the BPF verifier to incorrectly succeed in state pruning, which could enable a bypass of its security mechanisms. Such a bypass may lead to unexpected system behavior or potentially allow an attacker to execute unauthorized operations.

This CVE has been rated as Moderate because eBPF (and XDP) is restricted to root-only on Red Hat Enterprise Linux.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.