OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90217

HIGH · CVSS 7.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's BPF (Berkeley Packet Filter) subsystem, where improper comparison of iterator types during state pruning can lead to unsafe path pruning by the verifier. This flaw could potentially allow for exploitation, impacting system integrity and security. Organizations using Linux systems, particularly those leveraging BPF for networking or security functions, should prioritize addressing this issue to mitigate potential risks.

CVE
CVE-2026-90217
Severity
HIGH
CVSS
7.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACK_ITER slots.