CVE-2026-53099: bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI
In the Linux kernel, the following vulnerability has been resolved:
bpf: Switch CONFIGCFICLANG to CONFIGCFI
This was renamed in commit 23ef9d439769 ("kcfi: Rename CONFIGCFICLANG to CONFIGCFI") as it is now a compiler-agnostic option. Using the wrong name results in the code getting compiled out. Meaning the CFI failures for btfdtorkfunct would still trigger.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53099?
The severity of CVE-2026-53099 is rated at risk level 22.
How do I fix CVE-2026-53099?
To fix CVE-2026-53099, ensure that the configuration option is updated to CONFIG_CFI instead of CONFIG_CFI_CLANG in your Linux kernel.
What systems are affected by CVE-2026-53099?
CVE-2026-53099 affects systems running the Linux kernel that utilize the incorrect configuration option.
Is CVE-2026-53099 a critical vulnerability?
CVE-2026-53099 is not classified as critical, but it poses a risk if the incorrect compilation option is used.
When was CVE-2026-53099 published?
CVE-2026-53099 was published on June 24, 2026.