7 matches found
CVE-2026-92485
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. Incorrect handling of trampoline flags during the release of a BPF tracing link can lead to corruption of the trampoline. This corruption prevents the proper restoration of program instructions, which may result in a...
SUSE CVE-2026-92485
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpftracinglinkrelease The trampoline could be corrupted by the blindly 'tr-flags = BPFTRAMPFTAILCALLCTX' in verifier. 1. A fexit attached to a tailcallreachable prog. 'tr-flags' became 'BPFTRAMPFCALLORIG |...
DEBIAN-CVE-2026-92485
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpftracinglinkrelease The trampoline could be corrupted by the blindly 'tr-flags = BPFTRAMPFTAILCALLCTX' in verifier. 1. A fexit attached to a tailcallreachable prog. 'tr-flags' became 'BPFTRAMPFCALLORIG |...
CVE-2026-92485
CVE-2026-92485 affects the Linux kernel BPF subsystem . The root cause is a trampoline corruption in the BPF verifier: the flag assignment tr->flags = BPF_TRAMP_F_TAIL_CALL_CTX used direct assignment (=) instead of bitwise-OR (|=), so loading a second fexit program targeting the same tail-call...
CVE-2026-92485 bpf: Fix WARNING in bpf_tracing_link_release
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpftracinglinkrelease The trampoline could be corrupted by the blindly 'tr-flags = BPFTRAMPFTAILCALLCTX' in verifier. 1. A fexit attached to a tailcallreachable prog. 'tr-flags' became 'BPFTRAMPFCALLORIG |...
CVE-2026-92485: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpftracinglinkrelease The trampoline could be corrupted by the blindly 'tr-flags = BPFTRAMPFTAILCALLCTX' in verifier. 1. A fexit attached to a tailcallreachable prog. 'tr-flags' became 'BPFTRAMPFCALLORIG |...
Linux kernel security vulnerabilities
A security vulnerability exists in the Linux kernel. It stems from the blind setting of tr-flags to BPFTRAMPFTAILCALLCTX within the BPF verifier, resulting in a trampoline corruption. This prevents recovery of the target program’s NOP instructions when disabling the fexit link, potentially...