What’s Vulnerable › Vulnerabilities

CVE-2026-89799: bpf: Disable preemption in bpf_get_stackid

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid The get_perf_callchain call needs disabled preemption plus we need it disabled as long as we access its returned trace entries buffer. Note the bpf_get_stackid_pe function is executed already with preemption disabled.

Affected products

• Linux: 4.6 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/01fc93f670b3e759413a4d574c18ccfc636d2728
• https://git.kernel.org/stable/c/15f1bd8574662f1b7b26aaa2e23ebf4066f0117d
• https://git.kernel.org/stable/c/18c71e4b65ee60b8611fc071bdd7159f10185117
• https://git.kernel.org/stable/c/c4efdc1d4cb3e9183e41a1b2a5e0901dbbb31cdf
• https://git.kernel.org/stable/c/ccf481d73bce6e851cec364fe831c86fe66877cf
• https://git.kernel.org/stable/c/e79a70c2e97ae36bbdd371f0ce88a525f7b49f01

Get alerted when CVE-2026-89799 or the next vulnerability affects your stack