CVE-2026-74268

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the TCP implementation where a child socket inherits bpf sock ops cb flags via sk clone lock(). If the setup fails within tcp v4 syn recv sock() or tcp v6 syn recv sock(), the child socket is freed through put and exit. During this process, inet csk prepare forced close() releases the socket lock, allowing tcp done() to execute without it. If the BPF SOCK OPS STATE CB FLAG was inherited, tcp done() calls tcp set state(), which subsequently invokes tcp call bpf(). Because tcp call bpf() expects the lock to be held, it triggers a sock owned by me() warning. This occurs because the child socket is freed before it is established and should not execute any sock ops callbacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.