GHSA-JQHP-GCF3-75RX
Vulnerability from github – Published: 2026-10-18 18:31 – Updated: 2026-10-18 18:31In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix immediate JMP JEQ/JNE on MIPS32
An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was negative. Note that $at is mapped to BPF_REG_AX, which is used for constant blinding.
Fix the instruction to use the immediate form.
Found with test_bpf on MIPS32r1 emulated by QEMU.
{
"affected": [],
"aliases": [
"CVE-2026-98572"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-18T16:17:09Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix immediate JMP JEQ/JNE on MIPS32\n\nAn addu instruction was emitted instead of addiu, causing the immediate\nvalue 1 to be interpreted as register $at. This made the comparison\nresult invalid when the immediate operand was negative. Note that $at\nis mapped to BPF_REG_AX, which is used for constant blinding.\n\nFix the instruction to use the immediate form.\n\nFound with test_bpf on MIPS32r1 emulated by QEMU.",
"id": "GHSA-jqhp-gcf3-75rx",
"modified": "2026-10-18T18:31:54Z",
"published": "2026-10-18T18:31:54Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98572"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/1547e9f3a7d71971216e6dba30270cae13fe4e02"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/1bd91670966a7142ac94f2cebe2b5ae6bf5cb0c8"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6f939529ed6c580e9b6c5daa20be67fa0b3d4cf0"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/876ef04c75c2751acfd355606fca3eced71dec65"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/beeae92e70e705e90a0d6d9b3b8498ee3b92f495"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/db762fd96be225bd06161c9631160c755d891693"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.