CVE-2026-90306

A flaw was found in the Linux kernel's ARM architecture. When Control-Flow Integrity (CFI) is not actively used, or when a breakpoint is issued in userspace, the hw_breakpoint_cfi_handler() does not properly handle breakpoint type 0x03 (ARM_ENTRY_CFI_BREAKPOINT). This can lead to an unhandled fault, potentially allowing userspace to utilize a breakpoint type intended for kernel-level CFI, which could result in unexpected system behavior or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.