Strix
63.2K

CVE-2026-92515

Unknown

Last modified

CVE-2026-92515 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested structs btf_find_struct_field() initializes a fresh seen mask for every recursive descent. Unique special fields in different levels of the same aggregate therefore do not see one another.

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested structs btf_find_struct_field() initializes a fresh seen mask for every recursive descent. Unique special fields in different levels of the same aggregate therefore do not see one another. The duplicate fields can reach btf_parse_fields(), where they trigger an invariant WARN_ON_ONCE(). A crafted user BTF can consequently trigger the warning before map creation checks capabilities. Initialize the seen mask once in btf_find_field() and pass the same pointer through struct, datasec, and nested-struct walks. This gives the entire field traversal one shared uniqueness state.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 64e8ee814819f21beeeda00d4119221443d77992, < cec97102d4147e18568c93946014c4c8ebf86fcf; >= 64e8ee814819f21beeeda00d4119221443d77992, < 28d5f20ed022ade0fb0bfbf50b78fec782083175; >= 64e8ee814819f21beeeda00d4119221443d77992, < 373a1e9366e711b89bc5e45bd6edf33ef62402cd; >= 64e8ee814819f21beeeda00d4119221443d77992, < f08619f060468076e4acbdc10e0713af20d60e65
LinuxLinux6.11

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-92515?
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested structs btf_find_struct_field() initializes a fresh seen mask for every recursive descent. Unique special fields in different levels of the same aggregate therefore do not see one another. The duplicate fields can reach btf_parse_fields(), where they trigger an invariant WARN_ON_ONCE(). A crafted user BTF can consequently trigger the warning before map creation checks capabilities. Initialize the seen mask once in btf_find_field() and pass the same pointer through struct, datasec, and nested-struct walks. This gives the entire field traversal one shared uniqueness state.
How severe is CVE-2026-92515?
Severity scoring for CVE-2026-92515 is pending analysis.
How do I fix CVE-2026-92515?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-92515?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST