CVE 7.8 HIGH

bpf: Fix a potential use-after-free of BTF object_CVE-2026-45951

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a potential use-after-free of BTF object

Refcounting in the check_pseudo_btf_id() function is incorrect:
the __check_pseudo_btf_id() function might get called with a zero
refcounted btf. Fix this, and patch related code accordingly.

v3: rephrase a comment (AI)
v2: fix a refcount leak introduced in v1 (AI)

Basic Information

ID CVE-2026-45951
Source Linux
Published May 27, 2026 at 12:18
Modified May 30, 2026 at 10:46

Affected Product

Vendor Linux
Product Linux
Version 76145f7255326761dafb76721a785799d8a00d5f
Affected Versions Linux Linux 76145f7255326761dafb76721a785799d8a00d5f
Linux Linux 76145f7255326761dafb76721a785799d8a00d5f
Linux Linux 76145f7255326761dafb76721a785799d8a00d5f
Linux Linux 6.14

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.