CVE-2026-98641

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem on ARM64 architectures. When processing BPF exception callbacks, the compiler fails to properly set up the stack frame pointer register. A local user can exploit this vulnerability by running a crafted BPF program that triggers an exception, causing the kernel to overwrite memory on the active call stack. This flaw results in memory corruption and a system crash, leading to a denial of service (DoS).

This vulnerability is rated as having a Moderate impact because exploitation requires administrative privileges, such as CAP_BPF or root, to load and execute custom BPF programs on ARM64 hardware. By default, Red Hat Enterprise Linux restricts unprivileged eBPF access, preventing unprivileged local users from triggering this code path. Furthermore, the vulnerability is confined to 64-bit ARM architectures and results in a kernel crash causing a local denial of service, with no loss of data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.