CVE-2026-90210
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure When bpf_trampoline_update() fails before modify_fentry_multi()/ unregister_fentry_multi() is called, cur_image is unchanged (cur_image == old_image) and ftrace still calls into it. Freeing old_image in that case causes a UAF. Only free old_image when it differs from cur_image.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux65c3939656fd7848e9274faa07c26748b5bf049c, 0253073fb7d79a2dd2eae9581ea16db2aef395a6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | aef4dfa790b22d8052cfb78044eadbe03c876c39 ≤ v < 65c3939656fd7848e9274faa07c26748b5bf049c, aef4dfa790b22d8052cfb78044eadbe03c876c39 ≤ v < 0253073fb7d79a2dd2eae9581ea16db2aef395a6, 7.2 | 65c3939656fd7848e9274faa07c26748b5bf049c, 0253073fb7d79a2dd2eae9581ea16db2aef395a6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.