CVE Database›Document archive›CVE-2026-92517

CVE-2026-92517

kernel: bpf, riscv: Fix extable handling for arena load_acquire

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem, specifically in the handling of extable entries for arena load_acquire operations on RISC-V architecture. Due to improper exception handling, a stale register value on fault can be leaked through a map, potentially leading to information disclosure. Additionally, a missing extable entry can cause a kernel crash, resulting in a Denial of Service (DoS). A local attacker could exploit this vulnerability to gain access to sensitive kernel memory or cause system instability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-248 · Uncaught Exception