CVE-2026-90392

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90392
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90392.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90392
Downstream
Published
2026-09-17T16:09:25Z
Modified
2026-09-18T03:48:38Z
Summary
bpf: Fix potential UAF when reading bpf link info
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix potential UAF when reading bpf link info

In bpf_link_show_fdinfo and bpf_link_get_info_by_fd, link->prog is accessed without holding any locks. If the prog is concurrently replaced via bpf_link_update, the old prog can be freed, leading to a potential UAF issue.

Fix this by accessing link->prog under RCU protection to safely fetch the pointer and guarantee its lifetime while reading its fields.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90392.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0c991ebc8c69d29b7fc44db17075c5aa5253e2ab
Fixed
a5c936ac904767fc1d943d40b0308bcb2ae2509b
Fixed
d7d7208e2603b45724b684f4df73904fb347741e
Fixed
85cf991c881e7198be32be05a9daa2625390c8b3
Fixed
79347e42cfbc9e78872922e8f08a70609c9af82f
Fixed
863f3ddd0b8ac65abfb50d3be0869268ac0e277b

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90392.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.7.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90392.json"