{"id":"CVE-2026-90143","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: kcm: Hold RCU read lock while running BPF parser\n\nkcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu() which\nprevents CPU migration, but does not establish a…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: kcm: Hold RCU read lock while running BPF parser\n\nkcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu() which\nprevents CPU migration, but does not establish a…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < 37108861cf7bd909d4a372069bcd61c8f489e232","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < 3c70d27e792a28bca650ddd8a9aa0fe3591ffec5","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < 1d26a6e007d46babc7fa76e5a157dccf86cd55c0","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < 21526f8a191a3c50622b8c10bd927870d780eae4","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < 292846223eaddba890e40699d2ab82ee5671798c","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < f392affef3c9ce64dfdde794df0579e0a7793440","Linux >= 9b73896a81dc68a638a011877b7344b252f92276 < b0346dd64e4905291cc9c479f2e6cf1884ced4e6","Linux 4.9"],"published":"2026-09-17","updated":"2026-09-18","sourceUpdated":"2026-09-18T18:17:43.690","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90143","references":[{"url":"https://git.kernel.org/stable/c/1d26a6e007d46babc7fa76e5a157dccf86cd55c0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/21526f8a191a3c50622b8c10bd927870d780eae4","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/292846223eaddba890e40699d2ab82ee5671798c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/37108861cf7bd909d4a372069bcd61c8f489e232","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3c70d27e792a28bca650ddd8a9aa0fe3591ffec5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b0346dd64e4905291cc9c479f2e6cf1884ced4e6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b0e94ea63dbdcbfec9beb819cd5f8fa584809ef2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f392affef3c9ce64dfdde794df0579e0a7793440","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00164,"epssPercentile":0.06028,"ingestedAt":"2026-09-17T16:21:47.877Z","slug":"CVE-2026-90143","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: kcm: Hold RCU read lock while running BPF parser\n\nkcm_parse_func_strparser() calls bpf_prog_run_pin_on_cpu() which\nprevents CPU migration, but does not establish an RCU read-side\ncritical section. Consequently, BPF map operations can trigger\nWARN_ON_ONCE(!bpf_rcu_lock_held()) when called from the KCM strparser\nprogram.\n\nHold the RCU read lock while running the program.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":207143,"id":"CVE-2026-90143","ts":1789757335607,"field":"cvss","old":null,"new":"7.8"},{"seq":207142,"id":"CVE-2026-90143","ts":1789757335607,"field":"severity","old":"none","new":"high"}]}