CVE-2026-74338

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where sleepable BPF programs can be attached to the LSM cgroup. Because the cgroup shim operates under rcu read lock dont migrate(), attaching sleepable BPF programs in this context is prohibited. If a BPF LSM CGROUP program marked with BPF F SLEEPABLE is attached to file open and calls the function bpf get dentry xattr(), it can trigger a kernel bug due to a sleeping function being called from an invalid context. This condition can be reached by bypassing libbpf and using bpf(2) directly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.