CVE-2026-92518
Last modified
CVE-2026-92518 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_func already skips the kcfi instruction during setup. Including it again in the tailcall jump offset causes it to jump over an extra 4 bytes, skipping the stack pointer adjustment, which will result in kernel stack corruption..
Description
In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_func already skips the kcfi instruction during setup. Including it again in the tailcall jump offset causes it to jump over an extra 4 bytes, skipping the stack pointer adjustment, which will result in kernel stack corruption.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 30a59cc79754fd9ff3f41b7ee2eb21da85988548, < 34b1bb33a025787e05f966e74de18cd36276f801; >= 30a59cc79754fd9ff3f41b7ee2eb21da85988548, < a6e11a81da3420fd37f1518d4f238c4d5784086e; >= 30a59cc79754fd9ff3f41b7ee2eb21da85988548, < 52fb1756ea1d2759dfef2d86245be00b05dac3a2; fe5b68fdcec0f3d97a32f4c4acfef59cf90718f7; >= 6.11.6, < 6.12 |
| Linux | Linux | 6.12 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-92518?
How severe is CVE-2026-92518?
How do I fix CVE-2026-92518?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-92512In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92513In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92514In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92515In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92516In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92517In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92519In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92520In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92521In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92522In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92523In the Linux kernel, the following vulnerability has been re…
- CVE-2026-92524In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-92518?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST