CVE-2026-92518
High
Description
In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption in tailcall with CFI When CONFIG_CFI_CLANG is enabled, prog->bpf_func already skips the kcfi instruction during setup. Including it again in the tailcall jump offset causes it to jump over an extra 4 bytes, skipping the stack pointer adjustment, which will result in kernel stack corruption.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux34b1bb33a025787e05f966e74de18cd36276f801, a6e11a81da3420fd37f1518d4f238c4d5784086e, 52fb1756ea1d2759dfef2d86245be00b05dac3a2, 6.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 30a59cc79754fd9ff3f41b7ee2eb21da85988548 ≤ v < 34b1bb33a025787e05f966e74de18cd36276f801, 30a59cc79754fd9ff3f41b7ee2eb21da85988548 ≤ v < a6e11a81da3420fd37f1518d4f238c4d5784086e, 30a59cc79754fd9ff3f41b7ee2eb21da85988548 ≤ v < 52fb1756ea1d2759dfef2d86245be00b05dac3a2, fe5b68fdcec0f3d97a32f4c4acfef59cf90718f7, 6.11.6 ≤ v < 6.12, 6.12 | 34b1bb33a025787e05f966e74de18cd36276f801, a6e11a81da3420fd37f1518d4f238c4d5784086e, 52fb1756ea1d2759dfef2d86245be00b05dac3a2, 6.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.