CVE-2026-90359 bpf: Reject >8 byte return values on return-reading trampoline paths

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession trampolines and structops. It has accepted a 16-byte int128 return value...

CVE-2026-90359

CVE-2026-90359 affects the Linux kernel BPF subsystem. The btf_distill_func_proto() function, which builds the function model for fentry/fexit/fmod_ret/fsession trampolines and struct_ops , has accepted 16-byte __int128 return values since the trampoline was introduced. However, the BPF trampolin...

EUVD-2026-82020

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject 8 byte return values on return-reading trampoline paths btfdistillfuncproto builds the function model used for the fentry/fexit/fmodret/fsession trampolines and structops. It has accepted a 16-byte int128 return value...