CVE-2026-53099

bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI

published June 24, 2026

CVSS
—
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI

This was renamed in commit 23ef9d439769 ("kcfi: Rename CONFIG_CFI_CLANG

to CONFIG_CFI") as it is now a compiler-agnostic option. Using the wrong

name results in the code getting compiled out. Meaning the CFI failures

for btf_dtor_kfunc_t would still trigger.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Published
2026-06-24T16:30Z
EPSS history
Timeline
  • 24 JUN 16:30Z
    bpf: Switch CONFIG_CFI_CLANG to CONFIG_CFI
    cvelistv5