CVE-2026-90210

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the bpf trampoline multi attach free function. This occurs when bpf trampoline update() fails before the modify fentry multi() or unregister fentry multi() functions are called. In this scenario, the cur image remains unchanged and is identical to old image, while ftrace continues to call into it. Freeing old image under these conditions leads to a UAF. Use-After-Free is a memory corruption issue where an application continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.