vbpf Prevail up to 0.2.3 eBPF Verifier input validation

Summaryinfo

A vulnerability was found in vbpf Prevail up to 0.2.3. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component eBPF Verifier. Performing a manipulation results in input validation. This vulnerability is reported as CVE-2026-53706. The attack requires a local approach. No exploit exists.

Detailsinfo

A vulnerability classified as problematic has been found in vbpf Prevail up to 0.2.3. This affects an unknown code block of the component eBPF Verifier. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on integrity, and availability. The summary by CVE is:

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit result, the upper half of any pointer is silently destroyed at runtime, yet prevail marks the program as verified safe. Any caller that can submit an eBPF program for verification — including unprivileged users on kernels that permit BPF program loading — can produce a program that passes verification but faults or misbehaves at runtime. This issue has been patched in version 0.2.4.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-53706 since 06/10/2026. The exploitability is told to be easy. An attack has to be approached locally. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

Upgrading to version 0.2.4 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• vbpf

Name

• Prevail

Version

• 0.2.0
• 0.2.1
• 0.2.2
• 0.2.3

Website

• Product: https://github.com/vbpf/prevail/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion