SB20260815161 - Improper locking in Linux kernel bpf progs

Description

This security bulletin contains information about 1 vulnerability.

1) Improper locking (CVE-ID: CVE-2026-74314)

CWE-ID: CWE-667 - Improper Locking

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to unsafe cleanup of special fields in BPF map values in array and hash map update and delete paths when recycling or replacing map values from BPF execution contexts such as NMI context. A local user can trigger map update or delete operations involving special fields to cause a denial of service.

The issue affects tracing programs because referenced kptr destructors, uptr unpinning, and graph root destruction are not generally safe in NMI context.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/9ea734e2cc0143d7429ab7dc0b20c85e5836183c
• https://git.kernel.org/stable/c/a3a81d247651218e47153f2d2afd7aee236726fd