{"id":29217,"date":"2026-09-25T20:32:10","date_gmt":"2026-09-25T12:32:10","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98062"},"modified":"2026-09-25T20:32:10","modified_gmt":"2026-09-25T12:32:10","slug":"cve-2026-98062","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98062","title":{"rendered":"CVE-2026-98062 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Mark signal trac"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>bpf: Mark signal tracepoint siginfo arguments as scalar<\/p>\n<p>The signal_generate and signal_deliver tracepoints declare their info<br \/>\nargument as a struct kernel_siginfo pointer. btf_ctx_access() therefore<br \/>\ntreats it as a trusted pointer for tp_btf programs.<\/p>\n<p>Signal delivery also uses SEND_SIG_NOINFO and SEND_SIG_PRIV as special<br \/>\nvalues for this argument. Those values are zero and one respectively,<br \/>\nand are not pointers. A tp_btf program can currently dereference either<br \/>\nvalue and fault the kernel. In particular, signal_generate can run from<br \/>\ntimer interrupt context, turning the fault into a kernel panic.<\/p>\n<p>Record both tracepoints in raw_tp_null_args[] and mark argument one as<br \/>\na non-pointer. This preserves scalar access to the cookie while rejecting<br \/>\ndirect and helper-mediated pointer use. Merely marking it nullable would<br \/>\nnot suffice because SEND_SIG_PRIV is nonzero.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>bpf: Mark signal tracepoint siginfo arguments as scalar<\/p>\n<p>The signal_generate and signal_deliver tracepoints declare their info<br \/>\nargu<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-29217","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/29217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}