Not yet scoredPublished Sep 17, 2026

CVE-2026-92516bpf: Fix offset warn check for bpf_res_spin_lock

Updated under an hour ago (Oct 27, 2026, 12:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock Sashiko pointed out correctly that the case statement for BPF_RES_SPIN_LOCK incorrectly checks offset for BPF_SPIN_LOCK. Fix it by checking res_spin_lock_off instead.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0de2046137f976e7302d43ac01d9894d07ac1fff before dfdce1f20a7e5e826165c556fd3367c65387e966; from 0de2046137f976e7302d43ac01d9894d07ac1fff before 92356df4aa2b044b62bc7e45e0d99231af147f29; from 0de2046137f976e7302d43ac01d9894d07ac1fff before 04e19012efaec2bfd8c3b37fd8a6c3f1fe731ffc	CNA record

References

References

https://git.kernel.org/stable/c/dfdce1f20a7e5e826165c556fd3367c65387e966
https://git.kernel.org/stable/c/92356df4aa2b044b62bc7e45e0d99231af147f29
https://git.kernel.org/stable/c/04e19012efaec2bfd8c3b37fd8a6c3f1fe731ffc

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.