Skip to main content
CVE-2026-92519VulnerabilityPublished Updated

bpf_jit_free · riscv, bpf: Fix memory leak

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-92519· Low

Not known to be exploited · fixed in b594c23f584ab032a5eae809eee81b809dd27330 : update Microsoft when convenient.

Data as of 7 Nov 2026, 12:47 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in b594c23f584ab032a5eae809eee81b809dd27330, 7285f004293e7dc043c55369c0dbe8350b28cc45, 369e4635d04801f394d5bd42556f21029e95ff93 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 48a8f78c50bd6f7f08fd40daa62252fd043f2f18, < b594c23f584ab032a5eae809eee81b809dd27330
Fixed in
  • b594c23f584ab032a5eae809eee81b809dd27330
LinuxLinuxAffected
  • ≥ 48a8f78c50bd6f7f08fd40daa62252fd043f2f18, < 7285f004293e7dc043c55369c0dbe8350b28cc45
Fixed in
  • 7285f004293e7dc043c55369c0dbe8350b28cc45
LinuxLinuxAffected
  • ≥ 48a8f78c50bd6f7f08fd40daa62252fd043f2f18, < 369e4635d04801f394d5bd42556f21029e95ff93
Fixed in
  • 369e4635d04801f394d5bd42556f21029e95ff93
LinuxLinuxAffected
  • ≥ 48a8f78c50bd6f7f08fd40daa62252fd043f2f18, < 5cadc66b534fe8140441916200a20c7efb06a388
Fixed in
  • 5cadc66b534fe8140441916200a20c7efb06a388
LinuxLinuxAffected
  • ≥ 48a8f78c50bd6f7f08fd40daa62252fd043f2f18, < 2a3a29e90021806ea00527f6458cfd2edb58b42a
Fixed in
  • 2a3a29e90021806ea00527f6458cfd2edb58b42a
LinuxLinuxAffected
  • =6.6
Fixed in–

Description

A memory leak vulnerability exists in the bpf_jit_free function related to RISC-V and BPF in Microsoft software version 3.0. The issue has been published but lacks detailed technical or impact information.

References

Community reviews

Loading reviews…