CVE-2026-90146

A flaw was found in the Linux kernel. The bpfxdplinkupdate function bypasses necessary checks when updating an eXpress Data Path XDP program. A local user can first create an XDP link with a standard program and then use BPFLINKUPDATE to replace it with an offloaded or device-bound program. This...

CVE-2026-90146: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.9 contains a security vulnerability. This vulnerability stems from the fact that bpfxdplinkupdate directly calls devxdpinstall and skips devxdpattach. As a result, no checks are performed during program execution. Attackers can replace ordinary programs with...