Linux Linux Kernel Vulnerability Rated 7.8 CVSS

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-92485

Key Details

CVE	CVE-2026-92485
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-15
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Exploitation prediction (EPSS)	0.17% probability of exploitation in the next 30 days (5% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix WARNING in bpf_tracing_link_release

The trampoline could be corrupted by the blindly

'tr->flags = BPF_TRAMP_F_TAIL_CALL_CTX' in verifier.

1. A fexit attached to a tail_call_reachable prog. 'tr->flags' became

'BPF_TRAMP_F_CALL_ORIG | BPF_TRAMP_F_TAIL_CALL_CTX'. And, the

trampoline would poke the target prog's nop insn using jmp insn instead

of call insn.

2. Another fexit loaded with the same tail_call_reachable prog target.

'tr->flags' became 'BPF_TRAMP_F_TAIL_CALL_CTX'.

3. Close the first fexit link. Due to no BPF_TRAMP_F_CALL_ORIG in

'tr->flags', the trampoline will fail to restore the prog's nop insn

using call insn.

[ 3.410719] WARNING: kernel/bpf/syscall.c:3551 at bpf_tracing_link_release+0x53/0x60, CPU#1: test_progs/98

...

[ 3.428793] bpf_link_free+0x58/0x130

[ 3.429293] bpf_link_release+0x23/0x30

Fix the warning by updating 'tr->flags' with '|=' and lock. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-92485
CVE	https://www.cve.org/CVERecord?id=CVE-2026-92485

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-92485

CVE

https://www.cve.org/CVERecord?id=CVE-2026-92485