CVE-2026-68295

A flaw was found in the Linux kernel. The LoongArch Just-In-Time (JIT) compiler for the Berkeley Packet Filter (BPF) subsystem incorrectly sign-extends the results of signed 32-bit division and modulo operations. This behavior causes the upper bits of BPF registers to be set, which differs from the expected zero-extension model used by the BPF verifier and interpreter. Such an inconsistency could lead to unexpected program behavior or incorrect data processing within BPF programs.

This issue affects LoongArch BPF JIT. Signed ALU32 div/mod results are sign-extended instead of zero-extended, diverging from verifier semantics. Systems not using LoongArch are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.