In the Linux kernel, CVE-2026-31525 has exposed a subtle but serious correctness flaw in the BPF interpreter’s signed 32-bit division and modulo paths. The issue is not a classic memory corruption bug; it is a math bug with security consequences, triggered when the interpreter handles S32_MIN...
The Linux kernel’s BPF interpreter has a newly disclosed flaw, tracked as CVE-2026-31525, that exposes a subtle but important mismatch between the interpreter and the verifier when handling signed 32-bit division and modulo on INT_MIN. The bug is not a dramatic memory corruption primitive on its...