CVE-2026-92515

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Preserve unique-field state across nested structs

btf_find_struct_field() initializes a fresh seen mask for every recursive

descent. Unique special fields in different levels of the same aggregate

therefore do not see one another. The duplicate fields can reach

btf_parse_fields(), where they trigger an invariant WARN_ON_ONCE(). A

crafted user BTF can consequently trigger the warning before map creation

checks capabilities.

Initialize the seen mask once in btf_find_field() and pass the same pointer

through struct, datasec, and nested-struct walks. This gives the entire field

traversal one shared uniqueness state.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References