CVE-2026-98046

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable When bpf_btf_find_by_name_kind() finds a type in module BTF, it returns a new BTF object fd through __btf_new_fd(). This reaches anon_inode_getfd(), which can sleep while allocating or expanding the current task fd table. The helper prototype does not set might_sleep, so the verifier allows the helper in non-sleepable contexts such as BPF timer callbacks. The fd allocation can then sleep in softirq context and install the fd into the interrupted task. Mark the helper as sleepable. This preserves calls from the main body of a sleepable syscall program while rejecting calls from its non-sleepable regions.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 25, 2026
First seenSep 25, 2026

How to fix

Update
  • Linux Linux7bf23cf7c9c0e0b5e638e497cdc0ec3f223742cc, b843ab43ac9d2fa1ddd0dab8d0dcc19dbf764e2f, 29e40175617216fbd4544529f6bfb51d1ab95ba1, 4d8784226bd3c6a707975081f986078f40456cec, 17f54a8f2b9714529d56edbbe12d448ccdbbf469, 620614bf7672130c43b3cff375525a2202f61979 or later

Affected products

ProductAffected versionsFixed in
Linux Linux3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < 7bf23cf7c9c0e0b5e638e497cdc0ec3f223742cc, 3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < b843ab43ac9d2fa1ddd0dab8d0dcc19dbf764e2f, 3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < 29e40175617216fbd4544529f6bfb51d1ab95ba1, 3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < 4d8784226bd3c6a707975081f986078f40456cec, 3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < 17f54a8f2b9714529d56edbbe12d448ccdbbf469, 3d78417b60fba249cc555468cb72d96f5cde2964 ≤ v < 620614bf7672130c43b3cff375525a2202f61979, 5.147bf23cf7c9c0e0b5e638e497cdc0ec3f223742cc, b843ab43ac9d2fa1ddd0dab8d0dcc19dbf764e2f, 29e40175617216fbd4544529f6bfb51d1ab95ba1, 4d8784226bd3c6a707975081f986078f40456cec, 17f54a8f2b9714529d56edbbe12d448ccdbbf469, 620614bf7672130c43b3cff375525a2202f61979

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.