CVE-2026-92516

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. The vulnerability arises from an incorrect offset check within the BPF_RES_SPIN_LOCK mechanism. This error causes the system to verify the wrong memory offset, potentially leading to unexpected behavior or integrity issues within the kernel's BPF operations. The specific security implications of this incorrect check are not detailed, but it could affect the stability or reliability of BPF programs.

This vulnerability is rated as Low severity because exploitation requires local access with elevated privileges, such as CAP_BPF or CAP_SYS_ADMIN, significantly restricting the potential attack surface. Earlier enterprise releases, including Red Hat Enterprise Linux 8 and 9, lack the affected resilient spin lock implementation and remain unaffected. In environments where the feature is present, the flaw only affects verification warnings during BTF parsing of specialized spin locks without providing a direct path to privilege escalation or broad denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.