CVE-2026-74314

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where map update and delete paths call the bpf obj free fields() function when a value is replaced or recycled. This causes field destruction to depend on the context of the operation. In tracing programs, this can occur within the NMI (Non-Maskable Interrupt) context, where executing kptr destructors, uptr unpinning, and graph root destruction is unsafe. To resolve this, the bpf obj cancel fields() function was introduced for reusable-value paths to perform only NMI-safe cleanup for timer, workqueue, and task work fields, leaving full destruction for the final cleanup path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.