CVE-2026-53099
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
In the Linux kernel, the configuration option was switched from CONFIG_CFI_CLANG to CONFIG_CFI, as it is now compiler-agnostic. Using the old name results in the code being compiled out, meaning CFI failures for btf_dtor_kfunc_t would still trigger.
Risk Assessment
Lack of proper CFI protection may allow an attacker to exploit bugs in btf_dtor_kfunc_t functions, potentially leading to kernel integrity compromise.
Recommendation
Update the Linux kernel to a version containing the fix that uses CONFIG_CFI instead of CONFIG_CFI_CLANG.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI This was renamed in commit 23ef9d439769 ("kcfi: Rename CONFIG_CFI_CLANG to CONFIG_CFI") as it is now a compiler-agnostic option. Using the wrong name results in the code getting compiled out. Meaning the CFI failures for btf_dtor_kfunc_t would still trigger.