CVE-2026-92515

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. This vulnerability occurs because the btf_find_struct_field() function incorrectly initializes a fresh 'seen mask' during recursive descent, allowing duplicate fields in nested structures. A local attacker can exploit this by crafting a malicious BPF Type Format (BTF) to trigger a kernel warning (WARN_ON_ONCE()) before capability checks, leading to a denial of service.

This vulnerability is classified as Low severity because triggering the issue only generates a non-fatal kernel warning trace and requires local execution on the host. Under default configurations in Red Hat Enterprise Linux, unprivileged access to the eBPF subsystem is disabled, significantly limiting exposure to unauthenticated or unprivileged users. Furthermore, exploitation does not lead to memory corruption, privilege escalation, or full system unavailability unless the kernel is explicitly configured to panic on warnings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.