CVE-2026-53110: s390/bpf: Zero-extend bpf prog return values and kfunc arguments
In the Linux kernel, the following vulnerability has been resolved:
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values.
s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the risk rating of CVE-2026-53110?
The risk rating of CVE-2026-53110 is 23.
What does CVE-2026-53110 address in the Linux kernel?
CVE-2026-53110 addresses issues related to the zero-extension of BPF program return values and kfunc arguments in the s390x ABI.
How can I mitigate CVE-2026-53110 in my Linux kernel?
To mitigate CVE-2026-53110, you should update your Linux kernel to the latest patched version where this vulnerability is resolved.
Is CVE-2026-53110 a critical vulnerability?
CVE-2026-53110 has a moderate risk rating but can lead to broader system stability issues if not addressed.
When was CVE-2026-53110 published?
CVE-2026-53110 was published on June 24, 2026.