By weakness (CWE)

CWE-386: related vulnerabilities

CVEs classified under CWE-386. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-53081HIGH 7.8

  A flaw in the Linux kernel's BPF (Berkeley Packet Filter) verification engine allows two register states that should be considered incompatible to be incorrectly marked as equivalent. The verifier maintains a mapping of register identities to detect when optimization shortcuts would be unsafe. When comparing registers that both contain offset constants (BPF_ADD_CONST), the verifier was creating separate mapping entries without checking if their underlying identities conflicted. This breaks the consistency guarantee that prevents unsafe state pruning, potentially allowing a crafted eBPF program to bypass security checks that would normally catch logical inconsistencies.