一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月18日

CVE-2026-90210 – In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in bpf_t

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure

When bpf_trampoline_update() fails before modify_fentry_multi()/
unregister_fentry_multi() is called, cur_image is unchanged
(cur_image == old_image) and ftrace still calls into it. Freeing
old_image in that case causes a UAF.

Only free old_image when it differs from cur_image.