{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "06ab134ce8ecfa5a69e850f88f81c8a4c3fa91df"
            },
            {
              "fixed": "f523359c4789bb0396d2d642464a6e2fd4f2299d"
            },
            {
              "fixed": "f5d242825ca417bb6afe35fde6e8880f97ca43fb"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "d921baabd96445ef9c9c9410ca06164359c8a1a5"
            },
            {
              "last_affected": "9c020a533eaae1c2d41a7e3835c4c818a9b4b656"
            },
            {
              "last_affected": "ff6bdc205fd0a83bd365405d4e31fb5905826996"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.10.30"
            },
            {
              "fixed": "5.11"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.11.14"
            },
            {
              "fixed": "5.12"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "5.10.96"
            },
            {
              "fixed": "5.11"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.12.0"
            },
            {
              "fixed": "7.2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90300.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Clear buf on error in __bpf_get_task_stack\n\nBoth bpf_get_task_stack and bpf_get_task_stack_sleepable helpers that\nuse __bpf_get_task_stack have buf defined as ARG_PTR_TO_UNINIT_MEM\nargument and we should initialize the buf on every return path.\n\nAdding missing buf memset for __bpf_get_task_stack fail paths. This\nprovides deterministic buffer contents, which is useful when the buffer\nis used directly as a map key.",
  "id": "CVE-2026-90300",
  "modified": "2026-09-19T03:30:17.663133797Z",
  "published": "2026-09-17T16:08:24.515Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f523359c4789bb0396d2d642464a6e2fd4f2299d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f5d242825ca417bb6afe35fde6e8880f97ca43fb"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90300.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90300"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "bpf: Clear buf on error in __bpf_get_task_stack"
}