CVE-2026-89799
Description
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. Specifically, within the bpf_get_stackid function, preemption was not properly disabled when calling get_perf_callchain and accessing its trace entries buffer. This oversight could lead to a race condition, where multiple operations might interfere with each other. Such an issue could result in system instability, unintended information disclosure, or a denial of service (DoS) to the affected system.
Statement
This flaw is rated with a Moderate severity for Red Hat Enterprise Linux because exploitation requires local system privileges capable of loading tracing BPF programs, which substantially limits the attack surface in standard enterprise environments. Under default configurations, loading programs that invoke callchain stack retrieval helpers requires elevated capabilities such as CAP_BPF or CAP_SYS_ADMIN. Consequently, an unprivileged local user cannot directly trigger this race condition, restricting the potential threat of kernel memory corruption or denial of service to already privileged workloads.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | 7.8 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | High |
| Integrity Impact | None | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
