-

CVE-2026-90300

bpf: Clear buf on error in __bpf_get_task_stack

In the Linux kernel, the following vulnerability has been resolved:

bpf: Clear buf on error in __bpf_get_task_stack

Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that
use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM
argument and we should initialize the buf on every return path.

Adding missing buf memset for __bpf_get_task_stack fail paths. This
provides deterministic buffer contents, which is useful when the buffer
is used directly as a map key.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df
Version < f523359c4789bb0396d2d642464a6e2fd4f2299d
Status affected
Version 06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df
Version < f5d242825ca417bb6afe35fde6e8880f97ca43fb
Status affected
Version d921baabd96445ef9c9c9410ca06164359c8a1a5
Status affected
Version 9c020a533eaae1c2d41a7e3835c4c818a9b4b656
Status affected
Version ff6bdc205fd0a83bd365405d4e31fb5905826996
Status affected
Version 5.10.30
Version < 5.11
Status affected
Version 5.11.14
Version < 5.12
Status affected
Version 5.10.96
Version < 5.11
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.12
Status affected
Version 0
Version < 5.12
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.088
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f523359c4789bb0396d2d642464a6e2fd4f2299d
https://git.kernel.org/stable/c/f5d242825ca417bb6afe35fde6e8880f97ca43fb