PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-90299

CVE-2026-90299

kernel: bpf: Fix sleepable check for tracing/lsm prog

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · October 14, 2026

Description

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. When the CONFIG_FUNCTION_ERROR_INJECTION option is disabled, a sleepable tracing program can incorrectly attach to certain symbols, which the BPF verifier misidentifies as kernel functions instead of other BPF programs. A local attacker could exploit this by crafting a malicious BPF program, leading to a kernel bug and a system crash, resulting in a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-663 · Use of a Non-reentrant Function in a Concurrent Context