CVE-2026-53110

s390/bpf: Zero-extend bpf prog return values and kfunc arguments

CVE-2026-53110 is fixed in 35 products on 1 platform, first by ALAS2023-2026-1866, released June 22, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0012
1st percentile

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values. s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool6.18 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
bpftool6.18-debuginfo · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-64kb · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-azure · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-default · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-default · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-default · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.38.1.160000.2.22 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-default-base · sles 15.6 6.4.0-150600.23.135.1.150600.12.62.4 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.81.1.150700.17.45.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-default-base · sles 16.0 6.12.0-160000.38.1.160000.2.23 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-docs · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-docs · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-livepatch-6.18.33-63.124 · amzn 2023 1:1.0-0.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel-livepatch-SLE15-SP6_Update_31 · sles 15.6 1-150600.13.3.4 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-livepatch-SLE15-SP7-RT_Update_20 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:4120-1 Sep 10, 2026
kernel-livepatch-SLE15-SP7_Update_21 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-obs-build · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-source · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-source · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-source · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-syms · sles 15.6 6.4.0-150600.23.135.1 SUSE-SU-2026:4369-1 Oct 2, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-syms · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.38.1 OPENSUSE-SU-2026:21910-1 Sep 22, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.81.1 SUSE-SU-2026:4254-1 Oct 7, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.38.1 SUSE-SU-2026:23902-1 Sep 22, 2026
kernel6.18 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-debuginfo · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-debuginfo-common-aarch64 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-debuginfo-common-x86_64 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-devel · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-headers · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-modules-extra · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-modules-extra-common · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-tools · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-tools-debuginfo · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
kernel6.18-tools-devel · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
linux · Debian 13.5 (trixie) 6.12.94-1 DEBIAN-CVE-2026-53110 Jun 25, 2026
linux · Debian 14 7.0.10-1 DEBIAN-CVE-2026-53110 Jun 25, 2026
perf6.18 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
perf6.18-debuginfo · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
python3-perf6.18 · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026
python3-perf6.18-debuginfo · amzn 2023 1:6.18.33-63.124.amzn2023 ALAS2023-2026-1866 Jun 22, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.