CVE-2026-90312

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF). This vulnerability arises from an issue in how the BPF verifier processes certain memory load operations, specifically when a load-acquire instruction fetches into its own source register. This can lead to a type confusion, where the system misinterprets data types, allowing a local attacker to bypass security mechanisms. Exploitation of this flaw could potentially enable an attacker to gain elevated privileges or execute unauthorized code within the kernel.

This vulnerability is rated Moderate rather than Important because exploitation requires local access and complex program construction, while default system configurations restrict eBPF execution to privileged accounts. Standard Red Hat Enterprise Linux installations disable unprivileged eBPF by default, meaning an attacker must already possess administrative capabilities such as CAP_BPF or CAP_SYS_ADMIN to load crafted filter programs into the kernel. As a result, the risk of unprivileged local privilege escalation is substantially limited in typical deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.