Answer in brief
CVE-2026-53032 records a Unknown severity vulnerability in bpf: Fix NULL deref in map_kptr_match_type for scalar regs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ab6c637ad0276e42f8acabcbc64932a6d346dab3 <520454e839710c327808c2fcc98e28cee77355fc || >=ab6c637ad0276e42f8acabcbc64932a6d346dab3 <0a36c1f72888bca0237295a4da19cd91821a90be || >=ab6c637ad0276e42f8acabcbc64932a6d346dab3 <6982653ce5f119982aa58f1af58e7bfbebf39252 || >=ab6c637ad0276e42f8acabcbc64932a6d346dab3 <da1d615ce49a47986a8864e2371a26e97861085c || >=ab6c637ad0276e42f8acabcbc64932a6d346dab3 <4d0a375887ab4d49e4da1ff10f9606cab8f7c3ad || af3d2e0f3a54e67806959d161e613457772babc5 || 4782968e0d631b0d8944dcfd4bf8fb49be087101 || >=6.4.16 <6.5 || >=6.5.3 <6.6 | 520454e839710c327808c2fcc98e28cee77355fc, 0a36c1f72888bca0237295a4da19cd91821a90be, 6982653ce5f119982aa58f1af58e7bfbebf39252, da1d615ce49a47986a8864e2371a26e97861085c, 4d0a375887ab4d49e4da1ff10f9606cab8f7c3ad, 6.5, 6.6 |
| Linux/Linuxgeneric | 6.6 | Not reported |
Published upstream
Jun 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jun 24, 2026
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to branch on btf_is_kernel() before checking base_type(). A scalar register stored into a kptr slot has no btf, so the btf_is_kernel(reg->btf) call dereferences NULL. Move the base_type() != PTR_TO_BTF_ID guard before any reg->btf access.
Quoted source text, attributed separately from HOL analysis.