Improper handling of exceptional conditions in Linux kernel - CVE-2026-90306

Vulnerability identifier: #VU151442

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-90306

CWE-ID: CWE-755

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to prevent normal handling of userspace breakpoints.

The vulnerability exists due to incorrect handling of exceptional conditions in the ARM hardware breakpoint handler when processing userspace breakpoints of type 0x03 (ARM_ENTRY_CFI_BREAKPOINT). A local user can issue a breakpoint of this type from userspace to prevent normal handling of userspace breakpoints.

The behavior also occurs when kernel CFI instrumentation is disabled.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/22107402c2669b0163d43cc68901a2c4a59fa43a
• https://git.kernel.org/stable/c/314f1a6762b5d51b37784ed7dc701d4c3d893703
• https://git.kernel.org/stable/c/8ed9bff906cf8036531d1559f10e82733a52b41f
• https://git.kernel.org/stable/c/da64b150e4b7bee615b33ab21f3137c31ec36922

• Improper handling of exceptional conditions in Linux kernel arm kernel
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more