CVE-2026-90195
kernel: riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 13, 2026
Description
A flaw was found in the Linux kernel's RISC-V 64-bit (RV64) Just-In-Time (JIT) compiler for Berkeley Packet Filter (BPF) programs. The RV64 JIT fails to perform proper sign-extension for signed 1-byte and 2-byte kernel function (kfunc) arguments. This oversight can lead to incorrect processing of data within BPF programs, potentially causing unexpected program behavior or errors.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-681 · Incorrect Conversion between Numeric Types