CVE-2026-53110 s390/bpf: Zero-extend bpf prog return values and kfunc arguments
The Linux kernel s390 BPF JIT fails to zero-extend return values, potentially allowing integer overflows that lead to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53110?
CVE-2026-53110 is a high-severity vulnerability in Linux kernel, published on 24 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
s390/bpf: Zero-extend bpf prog return values and kfunc arguments
s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend signed return values.
s390 BPF JIT currently implements only sign extension. Fix this omission and implement zero extension too.
Weakness: CWE-190
Which versions are affected by CVE-2026-53110?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53110?
Apply the vendor's patch.
Is CVE-2026-53110 being exploited?
There is no known exploitation of CVE-2026-53110 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53110, DEBIAN-CVE-2026-53110, GHSA-j2v8-v4c8-53mp, ROOT-OS-UBUNTU-2404-CVE-2026-53110, UBUNTU-CVE-2026-53110.