CVE-2026-92486: bpf: Fix CFI mismatch in task work callback
Published Sep 17, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix CFI mismatch in task work callback
BPF subprograms use the bpfcallbackt ABI, but task work invokes the callback through a three-argument function pointer. This trips kCFI.
Store and invoke the callback as bpfcallbackt.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 17, 2026
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
Description
Frequently Asked Questions
1
Which systems are affected by this issue?
Linux kernel systems that use BPF subprograms with task-work callbacks are implicated. The mismatch is specifically detected when kernel Control-Flow Integrity (kCFI) checks the callback invocation.
2
What conditions are required to trigger the problem?
The affected path requires a BPF subprogram callback to be scheduled and invoked through task work. The issue occurs because task work uses a three-argument function-pointer type while the BPF callback uses the bpf_callback_t ABI.