Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-92486

bpf: Fix CFI mismatch in task work callback

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix CFI mismatch in task work callback BPF subprograms use the bpf_callback_t ABI, but task work invokes the callback through a three-argument function pointer. This trips kCFI. Store and invoke the callback as bpf_callback_t.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 38aa7003e369802f81a078f6673d10d97013f04f to < 85a33c910edc3651f68b17ae3c597c012545958faffected
  • 38aa7003e369802f81a078f6673d10d97013f04f to < a2cbab47f44e9ea8c5a161ecba1b6bb8535771ebaffected
  • 38aa7003e369802f81a078f6673d10d97013f04f to < 2805abd089576799b15092949420e3f8ba97fabdaffected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.52 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References