CVE-2026-92517
kernel: bpf, riscv: Fix extable handling for arena load_acquire
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem, specifically in the handling of extable entries for arena load_acquire operations on RISC-V architecture. Due to improper exception handling, a stale register value on fault can be leaked through a map, potentially leading to information disclosure. Additionally, a missing extable entry can cause a kernel crash, resulting in a Denial of Service (DoS). A local attacker could exploit this vulnerability to gain access to sensitive kernel memory or cause system instability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-248 · Uncaught Exception