CVE-2026-90269

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. When a BPF program attempts to perform a load-acquire operation on certain untrusted pointers, the BPF verifier fails to apply necessary fault protection. This oversight can lead to a kernel panic if the dereferenced pointer is invalid, such as a NULL pointer for a kernel thread. A local attacker could potentially exploit this vulnerability to cause a Denial of Service (DoS) by crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.