CVE-2026-90392
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdinfo and bpf_link_get_info_by_fd, link->prog is accessed without holding any locks. If the prog is concurrently replaced via bpf_link_update, the old prog can be freed, leading to a potential UAF issue. Fix this by accessing link->prog under RCU protection to safely fetch the pointer and guarantee its lifetime while reading its fields.
SeverityHigh
CVSS7.8
Exploit probability6. percentile0.2%
Product
Linux
PublishedSep 17, 2026
First seenSep 17, 2026
How to fix
Update
- Linux Linux4c8432a332d4a24dc2742f56062a53d8fad36f53, a5c936ac904767fc1d943d40b0308bcb2ae2509b, d7d7208e2603b45724b684f4df73904fb347741e, 85cf991c881e7198be32be05a9daa2625390c8b3, 79347e42cfbc9e78872922e8f08a70609c9af82f, 863f3ddd0b8ac65abfb50d3be0869268ac0e277b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < 4c8432a332d4a24dc2742f56062a53d8fad36f53, 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < a5c936ac904767fc1d943d40b0308bcb2ae2509b, 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < d7d7208e2603b45724b684f4df73904fb347741e, 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < 85cf991c881e7198be32be05a9daa2625390c8b3, 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < 79347e42cfbc9e78872922e8f08a70609c9af82f, 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab ≤ v < 863f3ddd0b8ac65abfb50d3be0869268ac0e277b, 5.7 | 4c8432a332d4a24dc2742f56062a53d8fad36f53, a5c936ac904767fc1d943d40b0308bcb2ae2509b, d7d7208e2603b45724b684f4df73904fb347741e, 85cf991c881e7198be32be05a9daa2625390c8b3, 79347e42cfbc9e78872922e8f08a70609c9af82f, 863f3ddd0b8ac65abfb50d3be0869268ac0e277b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.