Answer in brief
CVE-2026-92485 records a High severity (CVSS 7.8) vulnerability in bpf: Fix WARNING in bpf_tracing_link_release. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <48a0209d8da0d90a7b0a0db19d1ff88027b13781 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <61aaa8782bec59ecffd22e030f54ef9351bcabf9 || 605c8d8f9966fcd2f0b858fabebe416fc83f2209 || 028480eaf2a1401e914a1fa1a4a21d877cf0ae30 || 8f873cc3f67f2257493063e57d0caf07ef889ee9 || >=6.1.72 <6.2 || >=6.5.12 <6.6 || >=6.6.2 <6.7 | 48a0209d8da0d90a7b0a0db19d1ff88027b13781, 61aaa8782bec59ecffd22e030f54ef9351bcabf9, 6.2, 6.6, 6.7 |
| Linux/Linuxgeneric | 6.7 | Not reported |
| Linux/Linuxgeneric | >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <094f0a895cf97a993d06d5dc4c12e7cb7da845a5 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <48a0209d8da0d90a7b0a0db19d1ff88027b13781 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <61aaa8782bec59ecffd22e030f54ef9351bcabf9 || 605c8d8f9966fcd2f0b858fabebe416fc83f2209 || 028480eaf2a1401e914a1fa1a4a21d877cf0ae30 || 8f873cc3f67f2257493063e57d0caf07ef889ee9 || >=6.1.72 <6.2 || >=6.5.12 <6.6 || >=6.6.2 <6.7 | 094f0a895cf97a993d06d5dc4c12e7cb7da845a5, 48a0209d8da0d90a7b0a0db19d1ff88027b13781, 61aaa8782bec59ecffd22e030f54ef9351bcabf9, 6.2, 6.6, 6.7 |
| Linux/Linuxgeneric | >=8f873cc3f67f2257493063e57d0caf07ef889ee9 <a5c6316052f0ff1467221ecf2996cbab0a496b1e || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <d02035c5eb4955616efc5c6dbe3d98f19d798cb2 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <094f0a895cf97a993d06d5dc4c12e7cb7da845a5 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <48a0209d8da0d90a7b0a0db19d1ff88027b13781 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <61aaa8782bec59ecffd22e030f54ef9351bcabf9 || 605c8d8f9966fcd2f0b858fabebe416fc83f2209 || 028480eaf2a1401e914a1fa1a4a21d877cf0ae30 || >=6.6.2 <6.6.160 || >=6.1.72 <6.2 || >=6.5.12 <6.6 | a5c6316052f0ff1467221ecf2996cbab0a496b1e, d02035c5eb4955616efc5c6dbe3d98f19d798cb2, 094f0a895cf97a993d06d5dc4c12e7cb7da845a5, 48a0209d8da0d90a7b0a0db19d1ff88027b13781, 61aaa8782bec59ecffd22e030f54ef9351bcabf9, 6.6.160, 6.2, 6.6 |
| Linux/Linuxgeneric | >=605c8d8f9966fcd2f0b858fabebe416fc83f2209 <1757598b3804f7cb35b5b5e02558f6d8b9c2f254 || >=8f873cc3f67f2257493063e57d0caf07ef889ee9 <a5c6316052f0ff1467221ecf2996cbab0a496b1e || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <d02035c5eb4955616efc5c6dbe3d98f19d798cb2 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <094f0a895cf97a993d06d5dc4c12e7cb7da845a5 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <48a0209d8da0d90a7b0a0db19d1ff88027b13781 || >=2b5dcb31a19a2e0acd869b12c9db9b2d696ef544 <61aaa8782bec59ecffd22e030f54ef9351bcabf9 || 028480eaf2a1401e914a1fa1a4a21d877cf0ae30 || >=6.1.72 <6.1.191 || >=6.6.2 <6.6.160 || >=6.5.12 <6.6 | 1757598b3804f7cb35b5b5e02558f6d8b9c2f254, a5c6316052f0ff1467221ecf2996cbab0a496b1e, d02035c5eb4955616efc5c6dbe3d98f19d798cb2, 094f0a895cf97a993d06d5dc4c12e7cb7da845a5, 48a0209d8da0d90a7b0a0db19d1ff88027b13781, 61aaa8782bec59ecffd22e030f54ef9351bcabf9, 6.1.191, 6.6.160, 6.6 |
Published upstream
Sep 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 17, 2026
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpf_tracing_link_release The trampoline could be corrupted by the blindly 'tr->flags = BPF_TRAMP_F_TAIL_CALL_CTX' in verifier. 1. A fexit attached to a tail_call_reachable prog. 'tr->flags' became 'BPF_TRAMP_F_CALL_ORIG | BPF_TRAMP_F_TAIL_CALL_CTX'. And, the trampoline would poke the target prog's nop insn using jmp insn instead of call insn. 2. Another fexit loaded with the same tail_call_reachable prog target. 'tr->flags' became 'BPF_TRAMP_F_TAIL_CALL_CTX'. 3. Close the first fexit link. Due to no BPF_TRAMP_F_CALL_ORIG in 'tr->flags', the trampoline will fail to restore the prog's nop insn using call insn. [ 3.410719] WARNING: kernel/bpf/syscall.c:3551 at bpf_tracing_link_release+0x53/0x60, CPU#1: test_progs/98 ... [ 3.428793] bpf_link_free+0x58/0x130 [ 3.429293] bpf_link_release+0x23/0x30 Fix the warning by updating 'tr->flags' with '|=' and lock.
Quoted source text, attributed separately from HOL analysis.