{"id":"CVE-2026-90306","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9481/2: breakpoint: CFI breakpoints only on demand\n\nThis removes the stub hw_breakpoint_cfi_handler() from ARM, making\nit not steal breakpoint type 0x03 (ARM_ENTRY…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9481/2: breakpoint: CFI breakpoints only on demand\n\nThis removes the stub hw_breakpoint_cfi_handler() from ARM, making\nit not steal breakpoint type 0x03 (ARM_ENTRY…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c3f89986fde7bb9ccc86a901bf28e1f7d69fc3b3 < 22107402c2669b0163d43cc68901a2c4a59fa43a","Linux >= c3f89986fde7bb9ccc86a901bf28e1f7d69fc3b3 < 314f1a6762b5d51b37784ed7dc701d4c3d893703","Linux >= c3f89986fde7bb9ccc86a901bf28e1f7d69fc3b3 < da64b150e4b7bee615b33ab21f3137c31ec36922","Linux >= c3f89986fde7bb9ccc86a901bf28e1f7d69fc3b3 < 8ed9bff906cf8036531d1559f10e82733a52b41f","Linux 6.10"],"published":"2026-09-17","updated":"2026-09-21","sourceUpdated":"2026-09-21T14:17:28.903","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90306","references":[{"url":"https://git.kernel.org/stable/c/314f1a6762b5d51b37784ed7dc701d4c3d893703","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8ed9bff906cf8036531d1559f10e82733a52b41f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/da64b150e4b7bee615b33ab21f3137c31ec36922","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/22107402c2669b0163d43cc68901a2c4a59fa43a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00198,"epssPercentile":0.09839,"ingestedAt":"2026-09-17T16:21:47.828Z","slug":"CVE-2026-90306","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9481/2: breakpoint: CFI breakpoints only on demand\n\nThis removes the stub hw_breakpoint_cfi_handler() from ARM, making\nit not steal breakpoint type 0x03 (ARM_ENTRY_CFI_BREAKPOINT) unless\nCFI is actively used in the kernel.\n\nWhen not instrumenting with CFI, or when a breakpoint is issued in\nuserspace, we fall through to return 1 from hw_breakpoint_pending()\n\"unhandled fault\" so userspace can make use of this breakpoint.\n\nTested with LKDTM and this command line:\necho CFI_FORWARD_PROTO > /sys/kernel/debug/provoke-crash/DIRECT\nstill works as expected.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}