CVE-2026-90300EPSS p8.6%
CVE-2026-90300CVE-2026-90300
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Clear buf on error in __bpf_get_task_stack
Both bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that
use __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM
argument and we should initialize the buf on every return path.
Adding missing buf memset for __bpf_get_task_stack fail paths. This
provides deterministic buffer contents, which is useful when the buffer
is used directly as a map key.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.6% · 2026-10-04T12:00:21Z |
| Last modified | 2026-09-17 |