CVE-2026-90300
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-90300, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Clear buf on error in __bpf_get_task_stack
Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that
use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM
argument and we should initialize the buf on every return path.
Adding missing buf memset for __bpf_get_task_stack fail paths. This
provides deterministic buffer contents, which is useful when the buffer
is used directly as a map key.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df |
| Linux | Linux | 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df |
| Linux | Linux | d921baabd96445ef9c9c9410ca06164359c8a1a5 |
| Linux | Linux | 9c020a533eaae1c2d41a7e3835c4c818a9b4b656 |
| Linux | Linux | ff6bdc205fd0a83bd365405d4e31fb5905826996 |
| Linux | Linux | 5.10.30 |
| Linux | Linux | 5.11.14 |
| Linux | Linux | 5.10.96 |
| Linux | Linux | 5.12 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
