CVE-2026-90358
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments btf_distill_func_proto() accepts a function argument up to 16 bytes, so a 128-bit scalar such as __int128 reaches the x86 trampoline with arg_size == 16. But the current implementation assumes an __int128 argument only needs one register, so the register save area is under-allocated and save_args() overwrites adjacent stack slots. Compute the register count from arg_size for all arguments to fix it.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux2189232984b45ac8281c80484ab9f67b380a2ca1, 7f96bf0d24b2acc0732906b60a10f06783f2470d, 4aed2346fa9b88d458eeb8c01123f3c07585a675, 40f3bfbbb222b92278f3797614b70f68d46824ac, a6d7d7a253c550e74b0651897fe313c2f9b2301f, 814cba835ef648e0c5eb79505c96c0493b29eea6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < 2189232984b45ac8281c80484ab9f67b380a2ca1, a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < 7f96bf0d24b2acc0732906b60a10f06783f2470d, a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < 4aed2346fa9b88d458eeb8c01123f3c07585a675, a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < 40f3bfbbb222b92278f3797614b70f68d46824ac, a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < a6d7d7a253c550e74b0651897fe313c2f9b2301f, a9c5ad31fbdc4dec6d266fe22e51de1ad6d1bcf2 ≤ v < 814cba835ef648e0c5eb79505c96c0493b29eea6, 6.1 | 2189232984b45ac8281c80484ab9f67b380a2ca1, 7f96bf0d24b2acc0732906b60a10f06783f2470d, 4aed2346fa9b88d458eeb8c01123f3c07585a675, 40f3bfbbb222b92278f3797614b70f68d46824ac, a6d7d7a253c550e74b0651897fe313c2f9b2301f, 814cba835ef648e0c5eb79505c96c0493b29eea6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.