HarborGuard / CVE
Back to search
HIGHCVE-2026-45951Published Modified CNA Linux

CVE-2026-45951: bpf: Fix a potential use-after-free of BTF object

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free of BTF object Refcounting in the check_pseudo_btf_id() function is incorrect: the __check_pseudo_btf_id() function might get called with a zero refcounted btf. Fix this, and patch related code accordingly. v3: rephrase a comment (AI) v2: fix a refcount leak introduced in v1 (AI)

Metrics

CVSS v3.1
7.8
Severity
HIGH
Fixed in
0
Affected Products
2

Fix available

06.18.146.19.47.09ff46ffeecdb1802d6e26183177935b948a12e7fccd2d799ed4467c07f5ee18c2f5c59bcc990822ceac65c272f3b49021a843cba5107d63627395e0e
Affected packages
  • Linux / Linux
    < eac65c272f3b49021a843cba5107d63627395e0e (from 76145f7255326761dafb76721a785799d8a00d5f) · < 9ff46ffeecdb1802d6e26183177935b948a12e7f (from 76145f7255326761dafb76721a785799d8a00d5f) · < ccd2d799ed4467c07f5ee18c2f5c59bcc990822c (from 76145f7255326761dafb76721a785799d8a00d5f)
  • Linux / Linux
    6.14
    Fixed in 0, 6.18.14, 6.19.4, 7.0
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References