CVE-2026-92486
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix CFI mismatch in task work callback BPF subprograms use the bpf_callback_t ABI, but task work invokes the callback through a three-argument function pointer. This trips kCFI. Store and invoke the callback as bpf_callback_t.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux85a33c910edc3651f68b17ae3c597c012545958f, a2cbab47f44e9ea8c5a161ecba1b6bb8535771eb, 2805abd089576799b15092949420e3f8ba97fabd or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 38aa7003e369802f81a078f6673d10d97013f04f ≤ v < 85a33c910edc3651f68b17ae3c597c012545958f, 38aa7003e369802f81a078f6673d10d97013f04f ≤ v < a2cbab47f44e9ea8c5a161ecba1b6bb8535771eb, 38aa7003e369802f81a078f6673d10d97013f04f ≤ v < 2805abd089576799b15092949420e3f8ba97fabd, 6.18 | 85a33c910edc3651f68b17ae3c597c012545958f, a2cbab47f44e9ea8c5a161ecba1b6bb8535771eb, 2805abd089576799b15092949420e3f8ba97fabd |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.