SB20260918231 - Improper Check or Handling of Exceptional Conditions in Linux kernel liveupdate

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-92483)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause repeated invocation of FLB retrieve callbacks after a failed retrieval.

The vulnerability exists due to improper error handling in luo_flb_retrieve_one() when retrieving another file registered with an FLB after a prior retrieval failure. A local user can attempt to retrieve another file registered with the same FLB to cause repeated invocation of FLB retrieve callbacks after a failed retrieval.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5c4a03afcb21783987ffc64562b76ddd5a21b12b
• https://git.kernel.org/stable/c/908f3ea3f050b865c5c2d8c1da566185a4a3efc0