Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-90217

bpf: Compare iterator types during state pruning

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACK_ITER slots.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dfab99df147b0d364f0c199f832ff2aedfb2265a to < 86bbaf9e6e4fa6c0dfb352e9e11fae328069233aaffected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to < e4ab436d5ba61e4910fd49d24bb64ddb34d493d6affected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to < 6424b9cde9edc7f2098115bbfd1ee3d84a958380affected
  • dfab99df147b0d364f0c199f832ff2aedfb2265a to < 83608e303b95d07afba1c15da0b5d9e513c2f15aaffected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.57 to ≤ 6.18.*unaffected
  • 7.2.6 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References