CVE-2026-90300

bpf: Clear buf on error in __bpf_get_task_stack

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Clear buf on error in __bpf_get_task_stack

Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM argument and we should initialize the buf on every return path.

Adding missing buf memset for __bpf_get_task_stack fail paths. This provides deterministic buffer contents, which is useful when the buffer is used directly as a map key.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 5c4c57a277a87ed235183d03b671d346f5101f62Affected 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 4acc761b4e3feca1eb648d21fc4d665b23c5372dAffected 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 6f5a7bcc049709af12e403111d5e73e80910dafcAffected 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 1f0f61573ba4cb899105b5cef65be3ca02205f93Affected 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before f523359c4789bb0396d2d642464a6e2fd4f2299dAffected 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before f5d242825ca417bb6afe35fde6e8880f97ca43fbAffected d921baabd96445ef9c9c9410ca06164359c8a1a5Affected 9c020a533eaae1c2d41a7e3835c4c818a9b4b656Affected ff6bdc205fd0a83bd365405d4e31fb5905826996Affected 5.10.30 to before 5.11Affected 5.11.14 to before 5.12Affected 5.10.96 to before 5.11Affected
LinuxLinux	5.12Affected before 5.12Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 5c4c57a277a87ed235183d03b671d346f5101f62Affected
06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 4acc761b4e3feca1eb648d21fc4d665b23c5372dAffected
06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 6f5a7bcc049709af12e403111d5e73e80910dafcAffected
06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before 1f0f61573ba4cb899105b5cef65be3ca02205f93Affected
06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before f523359c4789bb0396d2d642464a6e2fd4f2299dAffected
06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df to before f5d242825ca417bb6afe35fde6e8880f97ca43fbAffected
d921baabd96445ef9c9c9410ca06164359c8a1a5Affected
9c020a533eaae1c2d41a7e3835c4c818a9b4b656Affected
ff6bdc205fd0a83bd365405d4e31fb5905826996Affected
5.10.30 to before 5.11Affected
5.11.14 to before 5.12Affected
5.10.96 to before 5.11Affected

LinuxLinux

5.12Affected
before 5.12Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.