CVE-2026-74257

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the udp bpf recvmsg() function. The sk msg recvmsg() function retrieves sk msg from psock->ingress msg under a lock, but the subsequent processing is lockless. This allows multiple threads to access the same sk msg simultaneously if not properly serialized by callers. The issue was identified when it was discovered that udp bpf recvmsg() no longer used lock sock() for serialization.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.