Wind River Support Network

HomeDefectsLIN1025-16021

Fixed

LIN1025-16021 : Security Advisory - linux - CVE-2026-53032

Created: Jun 25, 2026 Updated: Jul 31, 2026

Resolved Date: Jul 31, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix NULL deref in map_kptr_match_type for scalar regs  Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to branch on btf_is_kernel() before checking base_type(). A scalar register stored into a kptr slot has no btf, so the btf_is_kernel(reg->btf) call dereferences NULL.  Move the base_type() != PTR_TO_BTF_ID guard before any reg->btf access.

CVEs

CVE-2026-53032