CVE-2026-90146

A flaw was found in the Linux kernel. The bpfxdplinkupdate function bypasses necessary checks when updating an eXpress Data Path XDP program. A local user can first create an XDP link with a standard program and then use BPFLINKUPDATE to replace it with an offloaded or device-bound program. This...