{"id":"CVE-2026-98045","revision":"9b7671e8368248d7a03fbf0196dd7f91","records":[{"revision":"9b7671e8368248d7a03fbf0196dd7f91","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-98045","aliases":[],"title":"bpf: Mark faultable stack helpers as sleepable","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Mark faultable stack helpers as sleepable\n\nThe faultable variants of bpf_get_stack() and bpf_get_task_stack() pass\nmay_fault=true into the common stack collection code. Resolving user-space\nbuild IDs may then call build_id_parse_file() and block on filesystem\nreads.\n\nNeither helper prototype sets might_sleep. Since prototype selection uses\nthe sleepability of the whole program, the verifier can still allow these\nhelpers from a non-sleepable region within that program, such as an\nexplicit RCU or preemption-disabled region. The task-stack helper can also\nbe called from a non-sleepable timer callback of a sleepable program.\n\nMark both faultable prototypes as sleepable. The existing helper context\ncheck then rejects these calls while continuing to allow them in genuinely\nsleepable contexts.","state":0,"publishedAt":"2026-09-25T10:23:56.089+00:00","modifiedAt":"2026-10-19T09:12:51.065+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/stackmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d4dd9775ec242425576af93daadb80a34083a53c\",\n                            \"lessThan\": \"44b8d370f2725bad215da3e67668e98ba96671bd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d4dd9775ec242425576af93daadb80a34083a53c\",\n                            \"lessThan\": \"3014e8a8bdad55075d89836ad9c10710a9a69837\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d4dd9775ec242425576af93daadb80a34083a53c\",\n                            \"lessThan\": \"19e8d5a98afd071d8c1c5adeccf92b3c42eddc70\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d4dd9775ec242425576af93daadb80a34083a53c\",\n                            \"lessThan\": \"9d02927fdf4e930893c92e35fed01a2704496900\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/stackmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.7\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/44b8d370f2725bad215da3e67668e98ba96671bd","https://git.kernel.org/stable/c/3014e8a8bdad55075d89836ad9c10710a9a69837","https://git.kernel.org/stable/c/19e8d5a98afd071d8c1c5adeccf92b3c42eddc70","https://git.kernel.org/stable/c/9d02927fdf4e930893c92e35fed01a2704496900"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98045","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-98045","identifiers":["CVE-2026-98045"]},"retained":false,"historicalAffected":[]}],"coverage":[]}