EUVD-2026-81978

In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final spin unlock In a sleepable BPF program, a spin lock can provide the only RCU protection for a kptr. The final bpfspinunlock ends that protection, but the verifier leaves the pointer valid...

CVE-2026-90317

CVE-2026-90317 affects the Linux kernel BPF subsystem. In a sleepable BPF program , a spin lock may be the only RCU protection for a kptr. When the final bpf_spin_unlock() ends that protection, the verifier incorrectly leaves the pointer valid, allowing another CPU to free the object before it is...