{
  "cveId": "CVE-2026-90299",
  "url": "https://patchblox.com/security/cve/CVE-2026-90299",
  "summary": "CVE-2026-90299 is fixed in linux on 1 platform by DEBIAN-CVE-2026-90299 (version 7.2.6-1), released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix sleepable check for tracing/lsm prog  W...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix sleepable check for tracing/lsm prog  When CONFIG_FUNCTION_ERROR_INJECTION is disabled, a sleepable tracing prog is allowed to attach to \u0027__x64_\u0027-alike prefix symbols.  It is because the verifier does not verify whether the symbol is a kernel function or a bpf prog. That said, a sleepable tracing prog is allowed to attach to a bpf prog target whose name has \u0027__x64_\u0027-alike prefix.  For example, a sleepable fentry prog attaches to a \u0027__x64_sys_nop\u0027 XDP prog, and copies buffer from a user pointer with bpf_copy_from_user() helper. After attaching the XDP prog to lo interface, the kernel BUG could be triggered by \u0027ping -c 1 -W 1 127.0.0.1\u0027:  [    3.460756] BUG: sleeping function called from invalid context at kernel/bpf/trampoline.c:1324  Fix it by disallowing sleepable prog always when its target btf is not a kernel\u0027s btf.",
  "published": "2026-09-17T17:17:27Z",
  "severity": "",
  "epss": 0.00213,
  "epssPercentile": 0.11621,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-90299",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-90299",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}