OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-92518

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel when CONFIG_CFI_CLANG is enabled, specifically in the RISC-V architecture's BPF tailcall mechanism. An improper handling of the jump offset can lead to kernel stack corruption, potentially compromising system stability and security. System administrators and developers working with Linux kernel configurations, particularly those utilizing BPF and RISC-V, should prioritize addressing this issue to mitigate risks associated with stack corruption.

CVE
CVE-2026-92518
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_func already skips the kcfi instruction during setup. Including it again in the tailcall jump offset causes it to jump over an extra 4 bytes, skipping the stack pointer adjustment, which will result in kernel stack corruption.