CVE-2026-43010

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where bpf kprobe multi link attach() fails to validate if a program being attached has the sleepable flag set. Because kprobe.multi programs operate within an atomic/RCU context and are prohibited from sleeping, this flaw allows sleepable helpers, such as bpf copy from user(), to be invoked from a non-sleepable context. This results in a "sleeping function called from invalid context" error, which can lead to system instability or downtime.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.