Strix
63.5K

CVE-2026-92520

Unknown

Last modified

CVE-2026-92520 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call..

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8, < 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3; >= a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8, < e2396b8a562073787e627a5f483f1bc5c452fa6a; >= a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8, < 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232; 40e34ea01748e5b8afdd40a172868be1e1ab0ede; 388c9d3eefaea99828ee5000c693128a5b41ee7c; acabf5df49aa3a4f9c96200102d893351b511a88; e388671635acf470f0986d874389148fd234620b; 232f0ba4d69263af5912e279fcc32fef2882b1dc; >= 5.4.258, < 5.5; >= 5.10.198, < 5.11; >= 5.15.134, < 5.16; >= 6.1.56, < 6.2; >= 6.5.6, < 6.6
LinuxLinux6.6

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-92520?
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
How severe is CVE-2026-92520?
Severity scoring for CVE-2026-92520 is pending analysis.
How do I fix CVE-2026-92520?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-92520?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST