CVE-2026-90210

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This use-after-free UAF vulnerability occurs when the bpftrampolineupdate function fails during an update operation. This failure can lead to a previously freed memory region being accessed, potentially resulting in syst...

EUVD-2026-81803

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpftrampolinemultiattachfree on update failure When bpftrampolineupdate fails before modifyfentrymulti/ unregisterfentrymulti is called, curimage is unchanged curimage == oldimage and ftrace still calls into it...

CVE-2026-90210

CVE-2026-90210 is a Use-After-Free (UAF) in the Linux kernel's BPF trampoline subsystem , specifically in bpf_trampoline_multi_attach_free. When bpf_trampoline_update() fails before modify_fentry_multi() or unregister_fentry_multi() is called, cur_image remains equal to old_image and ftrace conti...

The vulnerability of the bpf_trampoline_update() function in the kernel/bpf/trampoline.c module, which supports the BPF interpreter for Linux kernels, allows a hacker to trigger a service failure.

The vulnerability of the bpftrampolineupdate function in the kernel/bpf/trampoline.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to trigger a...