What is GHSA-gj8p-gx9h-pwwh?

GHSA-gj8p-gx9h-pwwh is a security advisory published by GitHub Security Advisories with High severity. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in...

Which CVE IDs does GHSA-gj8p-gx9h-pwwh cover?

GHSA-gj8p-gx9h-pwwh covers the following CVE IDs: CVE-2026-90210. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gj8p-gx9h-pwwh?

GHSA-gj8p-gx9h-pwwh has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-gj8p-gx9h-pwwhHighCVSS 7.8

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in...

Vendor

GitHub Security Advisories

Published

September 17, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-90210 →

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure

When bpf_trampoline_update() fails before modify_fentry_multi()/ unregister_fentry_multi() is called, cur_image is unchanged (cur_image == old_image) and ftrace still calls into it. Freeing old_image in that case causes a UAF.

Only free old_image when it differs from cur_image.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-90210
https://git.kernel.org/stable/c/0253073fb7d79a2dd2eae9581ea16db2aef395a6
https://git.kernel.org/stable/c/65c3939656fd7848e9274faa07c26748b5bf049c
https://github.com/advisories/GHSA-gj8p-gx9h-pwwh