Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Azure kernel 6.6.157.1-1 may crash during checks

published 1 month ago
Summary

The Linux kernel version used in Azure has a coding error in a low‑level feature that can cause the system to crash or give incorrect results when it checks certain programs. This can lead to unexpected restarts or unstable behavior. Update the kernel to the latest released version that includes the fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
Azure Linux:3 azure kernel <= 6.6.157.1-1
Original advisory text
CVE-2026-98085 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:

bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge

Nicholas Carlini reported a bug in precision backtracking mechanism
for BPF_LD | BPF_{IND,ABS} instructions. These instructions are
modelled as two branches:
- fallthrough;
- implicit exit from current subprogram.

The implicit exit case was not handled by the backtrack_insn()
function. When backtracking such a path backtrack_insn() did not
call bt_subprog_enter(), which meant that backtracking continued
manipulating precision marks in a caller frame, while looking at
instructions in a callee frame.

This lead to segmentation faults during verification (see the
selftest), or unsound state pruning.
Timeline
Published25 Sep 2026
Updated26 Sep 2026
First seen26 Sep 2026
Sources
AZL-104613 · OSV
Track software like this
Free during beta