CVE-2026-53110

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-53110
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53110.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53110
Downstream
Published
2026-06-24T16:30:44.036Z
Modified
2026-07-08T08:09:45.167019121Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
Details

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values.

s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53110.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
528eb2cb87bc1353235a6384696b4849bde8b0ba
Fixed
edc90a12073b9a530064a99945c183dde120cb99
Fixed
44c4f999b03f55debb1a0c5ab5c1796895a1adf8
Fixed
366b0e05ee24f5ba62bdc7ec1346038258b9a797
Fixed
834918a77be51419383bf1dda9f02b81ecf26b34
Fixed
202e42e4aa890172366354b233c42c73107a3f59

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53110.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.6.141
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.91
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.33
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.10

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53110.json"