Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-53092

31
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg == dst_reg Consider the case of rX += rX where src_reg and dst_reg are pointers to the same bpf_reg_state in adjust_reg_min_max_vals(). The latter first modifies the dst_reg in-place, and later in the delta tracking, the subsequent is_reg_const(src_reg)/reg_const_value(src_reg) reads the post-{add,sub} value instead of the original source. This is problematic since it sets an incorrect delta, which sync_linked_regs() then propagates to linked registers, thus creating a verifier-vs-runtime mismatch. Fix it by just skipping this corner case.

First published: Jun 24, 2026Last modified: Jun 28, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.11, < 6.18.33CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.19, < 7.0.10CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.13%
Probability of exploitation in next 30 days
EPSS Percentile
3.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0013 is in the 15th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (10)

ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-7.0 (noble)Fixed in: 7.0.0-28.28~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-7.0 (resolute)Fixed in: 7.0.0-1009.9
ubuntupatch availablevia ubuntu_usn
Product: linux (resolute)Fixed in: 7.0.0-28.28
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (resolute)Fixed in: 7.0.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (resolute)Fixed in: 7.0.0-1003.4
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (resolute)Fixed in: 7.0.0-28.28.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (resolute)Fixed in: 7.0.0-1010.10
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (resolute)Fixed in: 7.0.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (resolute)Fixed in: 7.0.0-1010.10
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (resolute)Fixed in: 7.0.0-1009.9

Vendor Advisories (5)

ubuntuUSN-8603-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8593-1

Linux kernel vulnerabilities

Jul 23, 2026
ubuntuUSN-8569-1

Linux kernel (HWE) vulnerabilities

Jul 20, 2026
ubuntuUSN-8568-1

Linux kernel (OEM) vulnerabilities

Jul 20, 2026
ubuntuUSN-8566-1

Linux kernel vulnerabilities

Jul 20, 2026

References

access.redhat.com / security/cve/CVE-2026-53092
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Third Party Advisory
security.access.redhat.com / data/csaf/v2/vex/2026/cve-2026-53092.json
Third Party Advisory
git.kernel.org / stable/c/cc86a8b0a1c54d2bccf6f68cf49b82dea91b84de
Patch
git.kernel.org / stable/c/d7f14173c0d5866c3cae759dee560ad1bed10d2e
Patch
git.kernel.org / stable/c/d88e8e4a3b52bd5b2ff3eceba4b29d1b5506d066
Patch