CVE-2026-92520bpf: Zero queue and stack outputs on lock failure
- —Not scoredno CVSS score yet
- 0.18%Exploitation in 30 daysEPSS · top 92% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
Timeline
ID reserved
By Linux
- 1 day later
· 1 day later
Published
- 43 days later
· 43 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.18% · top 92% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected e388671635acf470f0986d874389148fd234620b – < 6468e8ac026b44ae2a78114b80f9d1b9164d0f6c
- affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 – < a6090eeb289c5fa45f7b629befac2bd3c19a6dae
- affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 – < 23b4bcc79bab5285275912b94e98c286f281de75
- affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 – < 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
- affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 – < e2396b8a562073787e627a5f483f1bc5c452fa6a
- affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 – < 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232
- affected 40e34ea01748e5b8afdd40a172868be1e1ab0ede
- affected 388c9d3eefaea99828ee5000c693128a5b41ee7c
- affected acabf5df49aa3a4f9c96200102d893351b511a88
- affected 232f0ba4d69263af5912e279fcc32fef2882b1dc
- affected 6.1.56 – < 6.1.191
- affected 5.4.258 – < 5.5
- affected 5.10.198 – < 5.11
- affected 5.15.134 – < 5.16
- affected 6.5.6 – < 6.6
- affected 6.6
- unaffected < 6.6
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.114 – ≤ 6.12.*
- unaffected 6.18.52 – ≤ 6.18.*
- unaffected 7.2.6 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References6
- https://git.kernel.org/stable/c/6468e8ac026b44ae2a78114b80f9d1b9164d0f6c (opens in a new tab)
- https://git.kernel.org/stable/c/a6090eeb289c5fa45f7b629befac2bd3c19a6dae (opens in a new tab)
- https://git.kernel.org/stable/c/23b4bcc79bab5285275912b94e98c286f281de75 (opens in a new tab)
- https://git.kernel.org/stable/c/1534c4bff3aaca19c4c9a82f93e9b81f7c983de3 (opens in a new tab)
- https://git.kernel.org/stable/c/e2396b8a562073787e627a5f483f1bc5c452fa6a (opens in a new tab)
- https://git.kernel.org/stable/c/7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-82141 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-92520)Record last updated .