-
CVE-2026-92520
- EPSS 0.17%
- Veröffentlicht 17.09.2026 16:10:27
- Zuletzt bearbeitet 17.09.2026 17:17:54
- Erkennungen
bpf: Zero queue and stack outputs on lock failure
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version <
1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
Status
affected
Version
a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version <
e2396b8a562073787e627a5f483f1bc5c452fa6a
Status
affected
Version
a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8
Version <
7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232
Status
affected
Version
40e34ea01748e5b8afdd40a172868be1e1ab0ede
Status
affected
Version
388c9d3eefaea99828ee5000c693128a5b41ee7c
Status
affected
Version
acabf5df49aa3a4f9c96200102d893351b511a88
Status
affected
Version
e388671635acf470f0986d874389148fd234620b
Status
affected
Version
232f0ba4d69263af5912e279fcc32fef2882b1dc
Status
affected
Version
5.4.258
Version <
5.5
Status
affected
Version
5.10.198
Version <
5.11
Status
affected
Version
5.15.134
Version <
5.16
Status
affected
Version
6.1.56
Version <
6.2
Status
affected
Version
6.5.6
Version <
6.6
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.6
Status
affected
Version
0
Version <
6.6
Status
unaffected
Version <=
6.18.*
Version
6.18.52
Status
unaffected
Version <=
7.2.*
Version
7.2.6
Status
unaffected
Version <=
*
Version
7.3-rc1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.063 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
https://git.kernel.org/stable/c/e2396b8a562073787e627a5f483f1bc5c452fa6a
https://git.kernel.org/stable/c/7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232