Skip to content
OpenAdvisories

Vendor

vbpf

3 known vulnerabilities.

Products

prevail 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-53670

    PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

    PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add() silently skips offset-variable updates when the destination register carries a non-singleton typ…

    vbpf prevail
  • Critical 9.3
    CVE-2026-53671

    PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification

    PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a T_CTX-typed base register as a silent no-op: do_mem_store in src/crab/ebpf_transformer.cp…

    vbpf prevail