CVE-2026-74364

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where exclusive maps created with excl prog hash can be bypassed. While the check map prog compatibility() function prevents programs from loading if their digest does not match the map->excl prog sha for direct references, this check does not apply to maps accessed via a map-of-maps structure. Because bpf map meta equal() ignores excl prog sha, an exclusive map can be placed inside a non-exclusive outer map, allowing an unrelated program to locate and modify it. In the context of a signed loader, this allows a program on a hostile host to rewrite the contents of a frozen map through the outer map, bypassing the metadata map exclusivity check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.