CVE-2026-98045
Received Received - Intake

BPF Stack Helper Sleepable Vulnerability in Linux Kernel

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Mark faultable stack helpers as sleepable The faultable variants of bpf_get_stack() and bpf_get_task_stack() pass may_fault=true into the common stack collection code. Resolving user-space build IDs may then call build_id_parse_file() and block on filesystem reads. Neither helper prototype sets might_sleep. Since prototype selection uses the sleepability of the whole program, the verifier can still allow these helpers from a non-sleepable region within that program, such as an explicit RCU or preemption-disabled region. The task-stack helper can also be called from a non-sleepable timer callback of a sleepable program. Mark both faultable prototypes as sleepable. The existing helper context check then rejects these calls while continuing to allow them in genuinely sleepable contexts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98045
EUVD
EUVD-2026-86698

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves faultable stack helper functions (bpf_get_stack and bpf_get_task_stack) that were not properly marked as sleepable. This could allow them to be called from non-sleepable regions like RCU or preemption-disabled sections, potentially causing issues during filesystem reads when resolving user-space build IDs.

Impact Analysis

If exploited, this could lead to system instability or crashes when these BPF helpers are called in contexts where sleeping is not allowed, such as during critical kernel operations. It may also cause unexpected delays or hangs during stack trace operations involving filesystem access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98045. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart