Riskcovery

CVE-2026-92519

riscv, bpf: Fix memory leak in bpf_jit_free

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 21, 2026
Reserved
Sep 16, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv, bpf: Fix memory leak in bpf_jit_free

When bpf_int_jit_compile() is called for subprograms, it returns early during the first pass (!prog->is_func || extra_pass is false), keeping ctx->offset alive for the subsequent extra pass.

If JIT compilation fails for a later subprogram, the BPF core aborts and calls bpf_jit_free() to clean up the first subprogram. However, bpf_jit_free() fails to free jit_data->ctx.offset, which causes a memory leak of the JIT context offsets array.

Fix this by adding the missing kfree(jit_data->ctx.offset) in bpf_jit_free().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 48a8f78c50bd6f7f08fd40daa62252fd043f2f18 to before 7285f004293e7dc043c55369c0dbe8350b28cc45Affected
  • 48a8f78c50bd6f7f08fd40daa62252fd043f2f18 to before b594c23f584ab032a5eae809eee81b809dd27330Affected
  • 48a8f78c50bd6f7f08fd40daa62252fd043f2f18 to before 5cadc66b534fe8140441916200a20c7efb06a388Affected
  • 48a8f78c50bd6f7f08fd40daa62252fd043f2f18 to before 2a3a29e90021806ea00527f6458cfd2edb58b42aAffected
  • 48a8f78c50bd6f7f08fd40daa62252fd043f2f18 to before 369e4635d04801f394d5bd42556f21029e95ff93Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.