CVE-2026-53032
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL deref in map_kptr_match_type for scalar regs Commit ab6c637ad027 ("bpf: Fix a bpf_kptr_xchg() issue with local kptr") refactored map_kptr_match_type() to branch on btf_is_kernel() before checking base_type(). A scalar register stored into a kptr slot has no btf, so the btf_is_kernel(reg->btf) call dereferences NULL. Move the base_type() != PTR_TO_BTF_ID guard before any reg->btf access.
Affected versions
Linux kernel versions
6.4.16,
6.5.3,
6.6
and later are affected. Fixed in
6.6.141,
6.12.91,
6.18.33,
7.0.10,
7.1
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-53032?
CVE-2026-53032 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.4.16 onward and has been patched in 6.6.141, 6.12.91, 6.18.33 and others. CVE-2026-53032 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-53032?
Yes — CVE-2026-53032 has been patched. Fixed versions include 6.6.141, 6.12.91, 6.18.33 and others. If you are running Linux kernel 6.4.16 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-53032 actively exploited?
No — CVE-2026-53032 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.