CVE-2026-92520

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. When BPF queue and stack pop/peek helpers fail to acquire a lock, they can return without properly initializing the output buffer. This allows a local attacker, by running a specially crafted BPF program, to observe uninitialized stack contents, potentially leading to information disclosure.

This vulnerability is rated as having a Moderate impact for Red Hat products because exploitation requires local access and elevated privileges to load custom eBPF programs, limiting the blast radius. Under default configurations in Red Hat Enterprise Linux, unprivileged users are prevented from loading eBPF programs, which restricts exposure on standard deployments. Consequently, only accounts possessing administrative rights or capabilities such as CAP_BPF can attempt to observe uninitialized kernel memory through this vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.