CVE-2026-74335

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the bpf task from vpid() function. This happens when cgroup skb programs run in softirq and interrupt a task that is currently executing do exit(). If the task has already passed through exit notify(), release task(), and unhash process(), its thread pid is cleared. Consequently, task active pid ns(current) returns NULL, leading find pid ns() to dereference a NULL pointer via idr find(). The issue is triggered during the process of looking up a task in the pid namespace of the current task via find task by vpid().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.