Riskcovery

CVE-2026-90217

bpf: Compare iterator types during state pruning

State
Published
Severity
7.8 High
Published
Sep 17, 2026
Updated
Oct 21, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Compare iterator types during state pruning

An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path.

Compare the pointer type for STACK_ITER slots.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to before 86bbaf9e6e4fa6c0dfb352e9e11fae328069233aAffected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to before e4ab436d5ba61e4910fd49d24bb64ddb34d493d6Affected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to before 6424b9cde9edc7f2098115bbfd1ee3d84a958380Affected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to before 83608e303b95d07afba1c15da0b5d9e513c2f15aAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.