CVE-2026-90299

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When the CONFIGFUNCTIONERRORINJECTION option is disabled, a sleepable tracing program can incorrectly attach to certain symbols, which the BPF verifier misidentifies as kernel functions instead of other BPF programs. A...