CVE-2026-92520bpf: Zero queue and stack outputs on lock failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3; from a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before e2396b8a562073787e627a5f483f1bc5c452fa6a; from a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232; 40e34ea01748e5b8afdd40a172868be1e1ab0ede; 388c9d3eefaea99828ee5000c693128a5b41ee7c; acabf5df49aa3a4f9c96200102d893351b511a88; e388671635acf470f0986d874389148fd234620b; 232f0ba4d69263af5912e279fcc32fef2882b1dc; and 5 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
- https://git.kernel.org/stable/c/e2396b8a562073787e627a5f483f1bc5c452fa6a
- https://git.kernel.org/stable/c/7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.