SB20260919184 - Improper handling of exceptional conditions in Linux kernel arm kernel

Description

This security bulletin contains information about 1 vulnerability.

1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-90306)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to prevent normal handling of userspace breakpoints.

The vulnerability exists due to incorrect handling of exceptional conditions in the ARM hardware breakpoint handler when processing userspace breakpoints of type 0x03 (ARM_ENTRY_CFI_BREAKPOINT). A local user can issue a breakpoint of this type from userspace to prevent normal handling of userspace breakpoints.

The behavior also occurs when kernel CFI instrumentation is disabled.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/22107402c2669b0163d43cc68901a2c4a59fa43a
• https://git.kernel.org/stable/c/314f1a6762b5d51b37784ed7dc701d4c3d893703
• https://git.kernel.org/stable/c/8ed9bff906cf8036531d1559f10e82733a52b41f
• https://git.kernel.org/stable/c/da64b150e4b7bee615b33ab21f3137c31ec36922