This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-90217 →

DEBIAN-CVE-2026-90217

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be M...

Original description

The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACK_ITER slots.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:13 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.6-1"}]}]

References

advisory security-tracker.debian.org