High 7.8Published Sep 17, 2026

CVE-2026-90392bpf: Fix potential UAF when reading bpf link info

Updated under an hour ago (Oct 27, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdinfo and bpf_link_get_info_by_fd, link->prog is accessed without holding any locks. If the prog is concurrently replaced via bpf_link_update, the old prog can be freed, leading to a potential UAF issue. Fix this by accessing link->prog under RCU protection to safely fetch the pointer and guarantee its lifetime while reading its fields.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab before a5c936ac904767fc1d943d40b0308bcb2ae2509b; from 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab before d7d7208e2603b45724b684f4df73904fb347741e; from 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab before 85cf991c881e7198be32be05a9daa2625390c8b3; from 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab before 79347e42cfbc9e78872922e8f08a70609c9af82f; from 0c991ebc8c69d29b7fc44db17075c5aa5253e2ab before 863f3ddd0b8ac65abfb50d3be0869268ac0e277b	CNA record

References

References

https://git.kernel.org/stable/c/a5c936ac904767fc1d943d40b0308bcb2ae2509b
https://git.kernel.org/stable/c/d7d7208e2603b45724b684f4df73904fb347741e
https://git.kernel.org/stable/c/85cf991c881e7198be32be05a9daa2625390c8b3
https://git.kernel.org/stable/c/79347e42cfbc9e78872922e8f08a70609c9af82f
https://git.kernel.org/stable/c/863f3ddd0b8ac65abfb50d3be0869268ac0e277b

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.