CVE-2026-92520
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
bpf: Zero queue and stack outputs on lock failure
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 | affected | git | a6090eeb289c5fa45f7b629befac2bd3c19a6dae | Unavailable | None listed |
| a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 | affected | git | 23b4bcc79bab5285275912b94e98c286f281de75 | Unavailable | None listed |
| a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 | affected | git | 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3 | Unavailable | None listed |
| a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 | affected | git | e2396b8a562073787e627a5f483f1bc5c452fa6a | Unavailable | None listed |
| a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 | affected | git | 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232 | Unavailable | None listed |
| 40e34ea01748e5b8afdd40a172868be1e1ab0ede | affected | git | Unavailable | Unavailable | None listed |
| 388c9d3eefaea99828ee5000c693128a5b41ee7c | affected | git | Unavailable | Unavailable | None listed |
| acabf5df49aa3a4f9c96200102d893351b511a88 | affected | git | Unavailable | Unavailable | None listed |
| e388671635acf470f0986d874389148fd234620b | affected | git | Unavailable | Unavailable | None listed |
| 232f0ba4d69263af5912e279fcc32fef2882b1dc | affected | git | Unavailable | Unavailable | None listed |
| 5.4.258 | affected | semver | 5.5 | Unavailable | None listed |
| 5.10.198 | affected | semver | 5.11 | Unavailable | None listed |
| 5.15.134 | affected | semver | 5.16 | Unavailable | None listed |
| 6.1.56 | affected | semver | 6.2 | Unavailable | None listed |
| 6.5.6 | affected | semver | 6.6 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.6 | Unavailable | None listed |
| 6.6.160 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.114 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.52 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.6 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |