Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-45951

bpf: Fix a potential use-after-free of BTF object

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free of BTF object Refcounting in the check_pseudo_btf_id() function is incorrect: the __check_pseudo_btf_id() function might get called with a zero refcounted btf. Fix this, and patch related code accordingly. v3: rephrase a comment (AI) v2: fix a refcount leak introduced in v1 (AI)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 76145f7255326761dafb76721a785799d8a00d5f to < eac65c272f3b49021a843cba5107d63627395e0eaffected
  • 76145f7255326761dafb76721a785799d8a00d5f to < 9ff46ffeecdb1802d6e26183177935b948a12e7faffected
  • 76145f7255326761dafb76721a785799d8a00d5f to < ccd2d799ed4467c07f5ee18c2f5c59bcc990822caffected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.14 to ≤ 6.18.*unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References