Improper control of a resource through its lifetime in Linux kernel - CVE-2026-98035

Vulnerability details

The vulnerability allows a local user to trigger unsafe cleanup of complex BPF map fields.

The vulnerability exists due to improper resource cleanup in rhtab map element update and deletion operations when updating or deleting values from BPF programs in NMI context. A local user can update or delete an rhtab map value to trigger unsafe cleanup of complex BPF map fields.

Affected software

How to mitigate CVE-2026-98035

External References

• https://git.kernel.org/stable/c/28fde1356dbc35e20a9f22a5ee65af09698fdf92
• https://git.kernel.org/stable/c/65cc95eba9e8b46312cac38c227473605a4b996a

Related Security Bulletins

• Improper control of a resource through its lifetime in Linux kernel bpf