linux bpf

The Linux kernel’s BPF interpreter has a newly disclosed flaw, tracked as CVE-2026-31525, that exposes a subtle but important mismatch between the interpreter and the verifier when handling signed 32-bit division and modulo on INT_MIN. The bug is not a dramatic memory corruption primitive on its...

The CVE in question, CVE-2026-23383, concerns the Linux bpf subsystem on arm64, where Microsoft’s advisory describes a fix to “force 8-byte alignment for JIT buffer to prevent atomic tearing.” That is a very small change on the surface, but it addresses a class of bugs that can be surprisingly...