CVE-2026-68386

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF sockmap component where unbound UDP sockets are accepted during sockmap updates. Because UDP sockets have their SOCK RCU FREE status changed when they are bound, a BPF program can increment a socket's reference count via lookup. If the socket is subsequently bound, the transition from unbound to bound causes the bpf sk release() function to skip the reference count decrement, resulting in a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.