> CVE-2026-90300

« BACK_TO_HOME
PUBLISHED
2026-09-17 17:17
MODIFIED
2026-09-17 17:17
EPSS (Prob. Exploit)
0.20%
Top 91.1%
DATA SOURCES:
NVD 🔗 2026-09-17 FIRST EPSS 🔗 2026-10-15 OSV 🔗 2026-09-21 MSRC 🔗 2026-09-20

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM argument and we should initialize the buf on every return path. Adding missing buf memset for __bpf_get_task_stack fail paths. This provides deterministic buffer contents, which is useful when the buffer is used directly as a map key.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

bpf: Clear buf on error in __bpf_get_task_stack

AFFECTED PACKAGES:
Unknown / Unknown
775 versions affected
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/09/2026 17:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 1 month ago

> REFERENCES

https://git.kernel.org/stable/c/f523359c4789bb0396d2d642464a6e2fd4f2299d
https://git.kernel.org/stable/c/f5d242825ca417bb6afe35fde6e8880f97ca43fb
« BACK_TO_HOME