CVE-2026-90300

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the bpf get task stack function fails to initialize the buf buffer on all return paths. This affects the bpf get task stack() and bpf get task stack sleepable() helpers, which define buf as an ARG PTR TO UNINIT MEM argument. The lack of a proper memset on failure paths can lead to non-deterministic buffer contents, which is problematic when the buffer is utilized directly as a map key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.