Strix
64.1K

CVE-2026-90300

Unknown

Last modified

CVE-2026-90300 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM argument and we should initialize the buf on every return path. Adding missing buf memset for __bpf_get_task_stack fail paths. This provides deterministic buffer contents, which is useful when the buffer is used directly as a map key..

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM argument and we should initialize the buf on every return path. Adding missing buf memset for __bpf_get_task_stack fail paths. This provides deterministic buffer contents, which is useful when the buffer is used directly as a map key.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df, < f523359c4789bb0396d2d642464a6e2fd4f2299d; >= 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df, < f5d242825ca417bb6afe35fde6e8880f97ca43fb; d921baabd96445ef9c9c9410ca06164359c8a1a5; 9c020a533eaae1c2d41a7e3835c4c818a9b4b656; ff6bdc205fd0a83bd365405d4e31fb5905826996; >= 5.10.30, < 5.11; >= 5.11.14, < 5.12; >= 5.10.96, < 5.11
LinuxLinux5.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90300?
In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task_stack Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM argument and we should initialize the buf on every return path. Adding missing buf memset for __bpf_get_task_stack fail paths. This provides deterministic buffer contents, which is useful when the buffer is used directly as a map key.
How severe is CVE-2026-90300?
Severity scoring for CVE-2026-90300 is pending analysis.
How do I fix CVE-2026-90300?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90300?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST