CVE-2026-90342

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock occurs in the BPF subsystem when the arena vm fault() function fails to acquire the arena->spinlock. The function returns VM FAULT RETRY, which triggers the do user addr fault() path to re-acquire the mmap lock. Because arena vm fault() did not originally hold the mmap lock, the lock is acquired twice, leading to a system deadlock. This issue is further complicated by the fact that a failed raw res spin lock irqsave() call indicates a potential deadlock has already been detected, making a retry ineffective.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.