CVE-2026-98628 | Linux Kernel up to 7.2.8/7.3-rc4 BPF Verifier resource consumption

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.2.8/7.3-rc4. Affected by this issue is the function bpf_opt_remove_nops/bpf_patch_insn_data/verifier_remove_insns of the component BPF Verifier. Performing a manipulation results in resource consumption.

This vulnerability is known as CVE-2026-98628. Attacking locally is a requirement. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More