CVE-2026-89799

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-09-16 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid The get_perf_callchain call needs disabled preemption plus we need it disabled as long as we access its returned trace entries buffer. Note the bpf_get_stackid_pe function is executed already with preemption disabled.

Affected Software (7)

VendorProductVersion
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < 01fc93f670b3e759413a4d574c18ccfc636d2728
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < e79a70c2e97ae36bbdd371f0ce88a525f7b49f01
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < 18c71e4b65ee60b8611fc071bdd7159f10185117
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < ccf481d73bce6e851cec364fe831c86fe66877cf
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < c4efdc1d4cb3e9183e41a1b2a5e0901dbbb31cdf
Linux Linux d5a3b1f691865be576c2bffa708549b8cdccda19 < 15f1bd8574662f1b7b26aaa2e23ebf4066f0117d
Linux Linux 4.6

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.18%
Raw Score 0.001750
Percentile 7.0%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00175
2026-10-30
0.00174
2026-10-29
0.00174

Intelligence Sources

mitre ref →
nvd ref →