CVE-2026-90217 PUBLISHED

bpf: Compare iterator types during state pruning

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

bpf: Compare iterator types during state pruning

An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path.

Compare the pointer type for STACK_ITER slots.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from dfab99df147b0d364f0c199f832ff2aedfb2265a to 6424b9cde9edc7f2098115bbfd1ee3d84a958380 (excl.)
  • affected from dfab99df147b0d364f0c199f832ff2aedfb2265a to 83608e303b95d07afba1c15da0b5d9e513c2f15a (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.7 is affected
  • unaffected from 0 to 6.7 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References