CVE-2026-92520

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. While the empty-map error path clears the buffer, a failed lock acquisition returns -EBUSY without writing to it. This allows BPF programs to observe uninitialized stack contents following a failed helper call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.