CVE-2026-90177: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RMW paths Atomic RMW verification records an instruction pointer type only when the current destination is PTR_TO_ARENA. A second path can therefore reach the same instruction with an ordinary pointer without comparing it against the saved arena type. The post-verification fixup uses the saved type to rewrite the instruction to BPF_PROBE_ATOMIC for every path. Record the actual destination type for all atomic RMW paths so the existing mismatch check rejects incompatible uses of one instruction.

Засегнати продукти

• Linux Linux: d503a04f8bc0c75dc9db9452d8cc79d748afb752 преди b14dabe9656c1029abf3aa01e69c0d62f37f2f88; d503a04f8bc0c75dc9db9452d8cc79d748afb752 преди d4ba9d888ac0a8f12c78071fff73e1205a0b9293; d503a04f8bc0c75dc9db9452d8cc79d748afb752 преди eb287c6e81dedef92da01eb947f380d0aae513c3; d503a04f8bc0c75dc9db9452d8cc79d748afb752 преди 4bc49ae344d65cfcef738f281ac575cf73ca2fc5
• Linux Linux: 6.10; преди 6.10; 6.12.114 до 6.12.*; 6.18.57 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-90177
• https://nvd.nist.gov/vuln/detail/CVE-2026-90177
• https://git.kernel.org/stable/c/b14dabe9656c1029abf3aa01e69c0d62f37f2f88
• https://git.kernel.org/stable/c/d4ba9d888ac0a8f12c78071fff73e1205a0b9293
• https://git.kernel.org/stable/c/eb287c6e81dedef92da01eb947f380d0aae513c3
• https://git.kernel.org/stable/c/4bc49ae344d65cfcef738f281ac575cf73ca2fc5