Signed Integer Vulnerability in Linux Kernel Affecting Division and Modulo Operations

CVE-2026-31525

What is CVE-2026-31525?

In the Linux kernel, a flaw in the BPF interpreter's handling of signed 32-bit division and modulo operations can lead to undefined behavior. Specifically, the kernel's abs() macro fails when applied to the minimum value of a signed 32-bit integer, resulting in incorrect calculations and potential out-of-bounds access. This vulnerability arises from a mismatch in the verifier's calculation and the interpreter's handling of certain integer operations. A patch has been introduced to correctly manage these operations and prevent exploitation.

References