Linux Kernel Vulnerability: Improper Pointer Null Check in BPF

CVE-2026-98134

What is CVE-2026-98134?

A security issue in the Linux kernel's BPF subsystem has been identified, where the pointer verification process can mistakenly assume a pointer is non-null. This flaw can lead to potential null pointer dereferences when two pointers are compared, especially in cases where one pointer lacks the PTR_MAYBE_NULL flag but may actually hold a NULL value at runtime. This vulnerability arises during the comparison of pointer types in the check_cond_jmp_op() function. The resolution involves a patch that enhances the type-checking mechanism to ensure accurate null checks and maintain backward compatibility.

References