-

CVE-2026-92520

bpf: Zero queue and stack outputs on lock failure

In the Linux kernel, the following vulnerability has been resolved:

bpf: Zero queue and stack outputs on lock failure

Queue and stack pop/peek helpers accept an uninitialized output buffer
because the verifier expects the helper to initialize it. The empty-map
error path clears the buffer, but a failed lock acquisition returns
-EBUSY without writing it.

Clear the output before returning -EBUSY so BPF programs cannot observe
uninitialized stack contents after a failed helper call.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version < 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
Status affected
Version a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version < e2396b8a562073787e627a5f483f1bc5c452fa6a
Status affected
Version a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version < 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232
Status affected
Version 40e34ea01748e5b8afdd40a172868be1e1ab0ede
Status affected
Version 388c9d3eefaea99828ee5000c693128a5b41ee7c
Status affected
Version acabf5df49aa3a4f9c96200102d893351b511a88
Status affected
Version e388671635acf470f0986d874389148fd234620b
Status affected
Version 232f0ba4d69263af5912e279fcc32fef2882b1dc
Status affected
Version 5.4.258
Version < 5.5
Status affected
Version 5.10.198
Version < 5.11
Status affected
Version 5.15.134
Version < 5.16
Status affected
Version 6.1.56
Version < 6.2
Status affected
Version 6.5.6
Version < 6.6
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.6
Status affected
Version 0
Version < 6.6
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.063
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
https://git.kernel.org/stable/c/e2396b8a562073787e627a5f483f1bc5c452fa6a
https://git.kernel.org/stable/c/7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232