CVE-2026-90269

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where the verifier fails to rewrite BPF LOAD ACQ instructions to BPF PROBE MEM loads, unlike the behavior for regular BPF LDX instructions. Consequently, the Just-In-Time (JIT) compiler emits a plain load without an exception table entry. If a fault occurs during this operation, it results in a kernel panic instead of being handled gracefully. This occurs when performing a load-acquire from specific pointer types that require fault protection, including PTR TO BTF ID, PTR TO BTF ID | PTR UNTRUSTED, PTR TO BTF ID | MEM ALLOC | PTR UNTRUSTED, and PTR TO MEM | MEM RDONLY | PTR UNTRUSTED.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.