CVE-2026-89799 Linux CVE debrief

Who should care

Linux kernel maintainers, system administrators, and security teams responsible for Linux kernel systems using bpf_get_stackid should assess exposure and apply patches or updates. These teams should verify potential exposure and apply patches or updates to prevent exploitation. The vulnerability impacts Linux kernel systems using bpf_get_stackid, and defenders should assess exposure and apply patches or updates.

Why it matters

A high-severity vulnerability has been resolved in the Linux kernel, affecting the bpf_get_stackid function. Linux kernel maintainers, system administrators, and security teams should assess exposure and apply patches or updates.

• Verify Linux kernel systems for potential exposure to this vulnerability
• Assess the priority of patching or updating Linux kernel systems using bpf_get_stackid
• Monitor systems for potential exploitation attempts

Technical summary

The bpf_get_stackid function in the Linux kernel has been vulnerable to a high-severity issue, resolved by disabling preemption. The vulnerability has a CVSS score of 7.8 and requires local access to be exploited. This issue impacts Linux kernel systems using bpf_get_stackid, and defenders should assess exposure and apply patches or updates. The vulnerability class is related to preemption in the bpf_get_stackid function, and defenders should verify potential exposure and apply patches or updates. The affected product context is Linux kernel systems using bpf_get_stackid.

Defensive priority

Assess exposure and apply patches for Linux kernel systems using bpf_get_stackid.

Recommended defensive actions

• Assess exposure of Linux kernel systems using bpf_get_stackid
• Apply patches or updates provided by the Linux kernel maintainers
• Monitor systems for potential exploitation attempts
• Verify Linux kernel systems for potential exposure to this vulnerability
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but additional information on affected systems and exploitation is limited. The vulnerability has been resolved in the Linux kernel, and defenders should verify potential exposure and apply patches or updates. The bpf_get_stackid function is used in Linux kernel systems, and defenders should assess exposure and apply patches or updates.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.