CVE-2026-92518

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description When CONFIG CFI CLANG is enabled, the prog->bpf func already skips the kcfi instruction during setup. Including this instruction again in the tailcall jump offset causes the system to jump over an extra 4 bytes, which skips the stack pointer adjustment and leads to kernel stack corruption. Control Flow Integrity (CFI) is a security mechanism used to ensure that the execution flow of a program follows a predefined graph, preventing unauthorized jumps to arbitrary code locations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.