CVE-2026-90143

CVE-2026-90143 affects the Linux kernel in the KCM (Kernel Connection Multiplexer) subsystem. The root cause is that kcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu()—which prevents CPU migration—but fails to establish an RCU read-side critical section . As a result, BPF map operations i...