CVE-2026-89580

CVE-2026-89580 is a race condition in the Linux kernel's BPF subsystem , specifically in __bpf_get_stack. A preemptible BPF program (e.g., a non-sleepable raw tracepoint program on a PREEMPT kernel) can be scheduled out between obtaining a per-CPU perf_callchain_entry buffer and copying it. Anoth...

PT-2026-90296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the bpf get stack function. In preemptible BPF programs running on a PREEMPT kernel, a task can be scheduled out after obtaining a per-CPU perf callchain...