CVE-2026-72427

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where the replace effective prog() and purge effective progs() functions incorrectly locate slots in the effective array when BPF F PREORDER programs are present. This occurs because the linear count of the program hlist does not match the array layout established by compute effective progs(), which prioritizes BPF F PREORDER programs. In replace effective prog() (used by bpf link update()), this leads to overwriting the wrong slot and corrupting the effective order. In purge effective progs(), it can result in a use-after-free condition where a slot belonging to a different program is cleared while the detached program remains in the array after bpf prog put() drops its reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.