CVE-2026-98628

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. A privileged local user can cause a Denial of Service (DoS) by loading a specially crafted BPF program containing numerous redundant instructions that trigger intensive post-verification cleanup. Because these rewrite operations do not check for termination signals or yield processor time, the task enters an uninterruptible state that ignores termination requests until the work completes, leading to prolonged resource consumption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.