CVE-2026-90143

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the kernel cipher manager (KCM) where the kcm parse func strparser() function calls bpf prog run pin on cpu() without establishing an RCU read-side critical section. RCU (Read-Copy-Update) is a synchronization mechanism that allows multiple readers to access data while it is being updated. Because this critical section is missing, BPF map operations can trigger a WARN ON ONCE(!bpf rcu lock held()) warning when executed from the KCM strparser program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.