CVE-2026-92486 PUBLISHED

bpf: Fix CFI mismatch in task work callback

Assigner: Linux
Reserved: 16.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix CFI mismatch in task work callback

BPF subprograms use the bpf_callback_t ABI, but task work invokes the callback through a three-argument function pointer. This trips kCFI.

Store and invoke the callback as bpf_callback_t.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 38aa7003e369802f81a078f6673d10d97013f04f to 85a33c910edc3651f68b17ae3c597c012545958f (excl.)
  • affected from 38aa7003e369802f81a078f6673d10d97013f04f to a2cbab47f44e9ea8c5a161ecba1b6bb8535771eb (excl.)
  • affected from 38aa7003e369802f81a078f6673d10d97013f04f to 2805abd089576799b15092949420e3f8ba97fabd (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.18 is affected
  • unaffected from 0 to 6.18 (excl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References