CVE-2026-90299

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where the verifier fails to distinguish between kernel functions and BPF programs when checking for sleepable tracing or LSM (Linux Security Module) programs. When CONFIG FUNCTION ERROR INJECTION is disabled, a sleepable tracing program can be attached to symbols with a x64 prefix, even if the target is another BPF program. This can lead to a kernel BUG if a sleepable function, such as the bpf copy from user() helper, is called from an invalid context, such as within an XDP (eXpress Data Path) program.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.