CVE-2026-74337

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where NMI and tracepoint BPF programs can re-enter a per-CPU or global LRU lock that is already held by bpf lru pop free() or push free() on the same CPU. This leads to an AA-deadlock, which is a type of deadlock where a process attempts to acquire a lock it already holds. The issue involves the l->lock and loc l->lock variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.