CVE-2026-90392

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists when reading bpf link information. In the functions bpf link show fdinfo() and bpf link get info by fd(), the link->prog variable is accessed without proper locking. If the program is replaced concurrently via bpf link update(), the original program may be freed while still being accessed, leading to a UAF. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.