SB20260815113 - Improper access control in Linux kernel bpf

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2026-74360)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to modify protected BPF map values.

The vulnerability exists due to improper access control in bpf_map_elem iterators when attaching an iterator to an exclusive map. A local user can attach an iterator to the map and use the exposed writable buffer to modify protected BPF map values.

The exclusivity check is bypassed because the target map is bound at attach time rather than being referenced from the program.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3c56ee343f9412d81918635c3e25e22a5dd6d87e
• https://git.kernel.org/stable/c/5cf2c85b1231218a3e3e9f188afb4fe2e17903d5
• https://git.kernel.org/stable/c/c3da741d5b2119c61c4498bc936f0fc1dbc3c79b