CVE-2026-98572: bpf: Fix immediate JMP JEQ/JNE on MIPS32
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix immediate JMP JEQ/JNE on MIPS32
An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPFREGAX, which is used for constant blinding.
Fix the instruction to use the immediate form.
Found with testbpf on MIPS32r1 emulated by QEMU.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
On MIPS32 BPF immediate JMP JEQ/JNE handling, replace the emitted addu instruction with the immediate-form addiu instruction.
Event History
Oct 18, 2026
CVE Published
via MITRE·03:18 PM
Data Sourced
via MITRE·03:18 PM
Description
Data Sourced
via NVD·04:17 PM
Description