CVE-2026-90143

net: kcm: Hold RCU read lock while running BPF parser

State: Published
Severity: 7.8 High
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: kcm: Hold RCU read lock while running BPF parser

kcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu() which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can trigger WARN_ON_ONCE(!bpf_rcu_lock_held()) when called from the KCM strparser program.

Hold the RCU read lock while running the program.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9b73896a81dc68a638a011877b7344b252f92276 to before 37108861cf7bd909d4a372069bcd61c8f489e232Affected 9b73896a81dc68a638a011877b7344b252f92276 to before 3c70d27e792a28bca650ddd8a9aa0fe3591ffec5Affected 9b73896a81dc68a638a011877b7344b252f92276 to before 1d26a6e007d46babc7fa76e5a157dccf86cd55c0Affected 9b73896a81dc68a638a011877b7344b252f92276 to before b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2Affected 9b73896a81dc68a638a011877b7344b252f92276 to before 21526f8a191a3c50622b8c10bd927870d780eae4Affected 9b73896a81dc68a638a011877b7344b252f92276 to before 292846223eaddba890e40699d2ab82ee5671798cAffected 9b73896a81dc68a638a011877b7344b252f92276 to before f392affef3c9ce64dfdde794df0579e0a7793440Affected 9b73896a81dc68a638a011877b7344b252f92276 to before b0346dd64e4905291cc9c479f2e6cf1884ced4e6Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

9b73896a81dc68a638a011877b7344b252f92276 to before 37108861cf7bd909d4a372069bcd61c8f489e232Affected
9b73896a81dc68a638a011877b7344b252f92276 to before 3c70d27e792a28bca650ddd8a9aa0fe3591ffec5Affected
9b73896a81dc68a638a011877b7344b252f92276 to before 1d26a6e007d46babc7fa76e5a157dccf86cd55c0Affected
9b73896a81dc68a638a011877b7344b252f92276 to before b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2Affected
9b73896a81dc68a638a011877b7344b252f92276 to before 21526f8a191a3c50622b8c10bd927870d780eae4Affected
9b73896a81dc68a638a011877b7344b252f92276 to before 292846223eaddba890e40699d2ab82ee5671798cAffected
9b73896a81dc68a638a011877b7344b252f92276 to before f392affef3c9ce64dfdde794df0579e0a7793440Affected
9b73896a81dc68a638a011877b7344b252f92276 to before b0346dd64e4905291cc9c479f2e6cf1884ced4e6Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.