The bug in the Linux kernel’s BPF subsystem involves incorrect calculation of register deltas when the source and destination registers reference the same state. This leads the verifier to accept BPF programs that are actually unsafe, while the runtime executes them with mismatched register values. The resulting inconsistency can cause memory corruption or altered program behavior and, based on the description, it is inferred that this could allow privilege escalation if an adversary can author a crafted BPF program. The weakness corresponds to CWE‑682, Incorrect Calculation.

All Linux kernel versions released prior to the commit cc86a8b0a1c54d2bccf6f68cf49b82dea91b84de are affected. The flaw resides in the core kernel BPF verifier and is independent of distribution; any system running the unpatched kernel is vulnerable.

The vulnerability is not listed in the CISA KEV catalog and the EPSS score is not available, indicating no published exploit at this time. Nevertheless, exploitation would require the ability to load custom BPF programs, typically achievable with local or privileged access. Because the flaw undermines the verification of BPF bytecode, the risk is high for environments that rely heavily on kernel‑side BPF, especially when running in privileged contexts.