By weakness (CWE)

CWE-253: related vulnerabilities

CVEs classified under CWE-253. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-53090HIGH 7.8

  A flaw was discovered in how the Linux kernel's eBPF (extended Berkeley Packet Filter) verifier handles certain packet-loading instructions when they appear inside subprograms. These instructions (ld_abs and ld_ind) have a built-in failure mode: if packet data cannot be loaded, they set a register to zero and exit. The kernel's verifier was not properly checking what happens when this failure occurs in a subprogram with a scalar (simple numeric) return type. An attacker with local access could potentially craft an eBPF program that bypasses security checks by exploiting this gap in verification, leading to privilege escalation or system compromise.