{"id":"CVE-2026-92515","summary":"bpf: Preserve unique-field state across nested structs","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Preserve unique-field state across nested structs\n\nbtf_find_struct_field() initializes a fresh seen mask for every recursive\ndescent. Unique special fields in different levels of the same aggregate\ntherefore do not see one another. The duplicate fields can reach\nbtf_parse_fields(), where they trigger an invariant WARN_ON_ONCE(). A\ncrafted user BTF can consequently trigger the warning before map creation\nchecks capabilities.\n\nInitialize the seen mask once in btf_find_field() and pass the same pointer\nthrough struct, datasec, and nested-struct walks. This gives the entire field\ntraversal one shared uniqueness state.","modified":"2026-09-18T03:48:41.130517806Z","published":"2026-09-17T16:10:24.159Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92515.json"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/28d5f20ed022ade0fb0bfbf50b78fec782083175"},{"type":"WEB","url":"https://git.kernel.org/stable/c/373a1e9366e711b89bc5e45bd6edf33ef62402cd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cec97102d4147e18568c93946014c4c8ebf86fcf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f08619f060468076e4acbdc10e0713af20d60e65"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92515.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92515"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"64e8ee814819f21beeeda00d4119221443d77992"},{"fixed":"cec97102d4147e18568c93946014c4c8ebf86fcf"},{"fixed":"28d5f20ed022ade0fb0bfbf50b78fec782083175"},{"fixed":"373a1e9366e711b89bc5e45bd6edf33ef62402cd"},{"fixed":"f08619f060468076e4acbdc10e0713af20d60e65"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92515.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.11.0"},{"fixed":"6.12.110"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.52"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92515.json"}}],"schema_version":"1.9.0"}