CVE-2026-68285: LoongArch: BPF: Fix memory leak in bpf_jit_free()
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: BPF: Fix memory leak in bpfjitfree()
When bpfintjitcompile() is called for subprograms, it returns early during the first pass (!prog->isfunc || extrapass is false), keeping ctx->offset alive for the subsequent extra pass.
If JIT compilation fails for a later subprogram, the BPF core aborts and calls bpfjitfree() to clean up the first subprogram. However, bpfjitfree() fails to free jitdata->ctx.offset, which causes a memory leak of the JIT context offsets array.
So fix this by adding the missing kvfree(jitdata->ctx.offset) in bpfjitfree().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (LoongArch BPF)to a version that resolves this vulnerability.Patch Fix memory leak in bpf_jit_free()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68285?
The severity of CVE-2026-68285 is rated at a risk level of 5.
How do I fix CVE-2026-68285?
To fix CVE-2026-68285, ensure that your Linux kernel is updated to the patched version where the memory leak in bpf_jit_free() has been addressed.
What systems are affected by CVE-2026-68285?
CVE-2026-68285 affects systems running the vulnerable versions of the Linux kernel with the LoongArch architecture.
What type of vulnerability is CVE-2026-68285?
CVE-2026-68285 is a memory leak vulnerability within the BPF subsystem of the Linux kernel.
When was CVE-2026-68285 published?
CVE-2026-68285 was published on August 10, 2026.