CVE-2026-90313

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An invalid storage access issue exists when replacing a cgroup BPF program in multi-attach mode. If the replacement process fails midway—specifically during bpf trampoline link cgroup shim or update effective progs—the cgroup bpf attach function may fail to restore the original storage and flags. This results in the active program holding dangling storage pointers, which leads to invalid memory access when the program calls the bpf get local storage() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.