CVE-2026-53670
PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add() silently skips offset-variable updates when the destination register carries a non-singleton typeset (two or more simultaneously possible pointer types). Subsequent bounds checks use the stale offset and accept out-of-bounds memory accesses, so a crafted BPF program passes verification even though it would corrupt memory at runtime. This issue has been patched in version 0.2.4.
| CWE | CWE-682 |
| Vendor | vbpf |
| Product | prevail |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for vbpf prevail
Be the first to know when new unknown vulnerabilities affecting vbpf prevail are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
vbpf / prevail
< 0.2.4