CVE-2026-53090 bpf: Fix ld_{abs,ind} failure path analysis in subprogs

🗓️ 24 Jun 2026 16:30:29Reported by GoogleType

osv🔗 osv.dev👁 1 Views

CVE-2026-53090: Fix BPF verifier to simulate success and failure paths for ld_abs and ld_ind in subprograms with BTF and scalar returns.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2026-53090	24 Jun 202619:00	–	circl
CVE	CVE-2026-53090	24 Jun 202616:30	–	cve
Cvelist	CVE-2026-53090 bpf: Fix ld_{abs,ind} failure path analysis in subprogs	24 Jun 202616:30	–	cvelist
Debian CVE	CVE-2026-53090	24 Jun 202616:30	–	debiancve
EUVD	EUVD-2026-38958	24 Jun 202616:30	–	euvd
NVD	CVE-2026-53090	24 Jun 202617:17	–	nvd
OSV	BELL-CVE-2026-53090	26 Jun 202606:12	–	osv
OSV	DEBIAN-CVE-2026-53090	24 Jun 202617:17	–	osv
OSV	ROOT-OS-DEBIAN-11-CVE-2026-53090 CVE-2026-53090 in rootio-linux - Patched by Root	14 Jul 202609:12	–	osv
OSV	ROOT-OS-DEBIAN-12-CVE-2026-53090 CVE-2026-53090 in rootio-linux - Patched by Root	14 Jul 202609:03	–	osv

Source	Link
git	www.git.kernel.org/stable/c/d846d83bdacbd8f14fc45c63b8c1d22608452e1c
git	www.git.kernel.org/stable/c/ee861486e377edc55361c08dcbceab3f6b6577bd
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53090.json
access	www.access.redhat.com/security/cve/CVE-2026-53090
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53090.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-53090
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:48Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.8

EPSS0.00124