Improper Initialization in Linux kernel - CVE-2026-74720

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper state management in adjust_ptr_min_max_vals() in the BPF verifier when handling commuted arithmetic involving scalar += pointer operations. A local user can execute a crafted BPF program to cause a denial of service.

The issue occurs because the destination register did not preserve the complete pointer register state, which could leave frame number and parent identity tracking inconsistent for pointer provenance.

Affected software

How to mitigate CVE-2026-74720

External References

• https://git.kernel.org/stable/c/29c239f8dbec5ab33a61796724d189bddee6cd4b
• https://git.kernel.org/stable/c/8109c25e0c41f5f19a1c2380bb49c991a877494e
• https://git.kernel.org/stable/c/86b203aadc2930e0a4f9c6277b5b80ff3664c472
• https://git.kernel.org/stable/c/8cb23101a3fcc7432b451ea3d0f14a90711f4acf
• https://git.kernel.org/stable/c/a4c6f804b44c5c790269b25e0e61cf4e9f117c86
• https://git.kernel.org/stable/c/d1959028190a7649b926f5867a58de5fe221b23c
• https://git.kernel.org/stable/c/db6382ed3361bdd8129572a3423956cba1dae829
• https://git.kernel.org/stable/c/eaffa1495e4fe6330aeff9f323ea3d48b01f118a

Related Security Bulletins

• Improper Initialization in Linux kernel bpf
• Debian update for linux