CVE-2026-90143net: kcm: Hold RCU read lock while running BPF parser
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Hold RCU read lock while running BPF parser kcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu() which prevents CPU migration, but does not establish an RCU read-side critical section. Consequently, BPF map operations can trigger WARN_ON_ONCE(!bpf_rcu_lock_held()) when called from the KCM strparser program. Hold the RCU read lock while running the program.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 9b73896a81dc68a638a011877b7344b252f92276 before 37108861cf7bd909d4a372069bcd61c8f489e232; 9b73896a81dc68a638a011877b7344b252f92276 builds before 3c70d27e792a28bca650ddd8a9aa0fe3591ffec5; 9b73896a81dc68a638a011877b7344b252f92276 builds before 1d26a6e007d46babc7fa76e5a157dccf86cd55c0; from 9b73896a81dc68a638a011877b7344b252f92276 before b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2; from 9b73896a81dc68a638a011877b7344b252f92276 before 21526f8a191a3c50622b8c10bd927870d780eae4; from 9b73896a81dc68a638a011877b7344b252f92276 before 292846223eaddba890e40699d2ab82ee5671798c; from 9b73896a81dc68a638a011877b7344b252f92276 before f392affef3c9ce64dfdde794df0579e0a7793440; from 9b73896a81dc68a638a011877b7344b252f92276 before b0346dd64e4905291cc9c479f2e6cf1884ced4e6 | CNA record |
References
- https://git.kernel.org/stable/c/37108861cf7bd909d4a372069bcd61c8f489e232
- https://git.kernel.org/stable/c/3c70d27e792a28bca650ddd8a9aa0fe3591ffec5
- https://git.kernel.org/stable/c/1d26a6e007d46babc7fa76e5a157dccf86cd55c0
- https://git.kernel.org/stable/c/b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2
- https://git.kernel.org/stable/c/21526f8a191a3c50622b8c10bd927870d780eae4
- https://git.kernel.org/stable/c/292846223eaddba890e40699d2ab82ee5671798c
- https://git.kernel.org/stable/c/f392affef3c9ce64dfdde794df0579e0a7793440
- https://git.kernel.org/stable/c/b0346dd64e4905291cc9c479f2e6cf1884ced4e6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.