CVE-2026-90317

CVE-2026-90317 is a use-after-free in the Linux kernel BPF subsystem. In a sleepable BPF program , a spin lock can be the sole RCU protection for a kernel pointer (kptr). The final bpf_spin_unlock() ends that protection, yet the verifier leaves the pointer marked valid, allowing another CPU to fr...