GHSA-gr6f-x92j-c7m6HighCVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix a potential use-after-free of BTF object
Refcounting in the check_pseudo_btf_id() function is incorrect: the __check_pseudo_btf_id() function might get called with a zero refcounted btf. Fix this, and patch related code accordingly.
v3: rephrase a comment (AI) v2: fix a refcount leak introduced in v1 (AI)
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-45951
- https://git.kernel.org/stable/c/9ff46ffeecdb1802d6e26183177935b948a12e7f
- https://git.kernel.org/stable/c/ccd2d799ed4467c07f5ee18c2f5c59bcc990822c
- https://git.kernel.org/stable/c/eac65c272f3b49021a843cba5107d63627395e0e
- https://github.com/advisories/GHSA-gr6f-x92j-c7m6