Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-74720

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/08/2026
Última modificación:
22/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bpf: Preserve pointer state for commuted arithmetic<br /> <br /> When scalar += pointer is handled in adjust_ptr_min_max_vals(), the<br /> destination register inherits the pointer state from the source pointer.<br /> Copying only selected fields is fragile because pointer provenance is<br /> tracked by several bpf_reg_state fields.<br /> <br /> Use the caller&amp;#39;s temporary offset register to preserve the scalar operand<br /> while replacing the destination with the full pointer state. This preserves<br /> the frame number for PTR_TO_STACK registers and keeps parent identity<br /> fields consistent.

Impacto