CVE-2026-90317

CVE-2026-90317 is a use-after-free in the Linux kernel BPF subsystem. In a sleepable BPF program , a spin lock can be the sole RCU protection for a kernel pointer (kptr). The final bpf_spin_unlock() ends that protection, yet the verifier leaves the pointer marked valid, allowing another CPU to fr...

PT-2026-69791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth management component where RCU-protected pointers are dereferenced outside critical sections, which can lead to a Use-After-Free UAF condition. UAF occur...

CVE-2026-43050 atm: lec: fix use-after-free in sock_def_readable()

In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sockdefreadable A race condition exists between lecatmclose setting priv-lecd to NULL and concurrent access to priv-lecd in sendtolecd, lechandlebridge, and lecatmsend. When the socket is freed via...