CVE-2026-74400

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the BPF kfuncs bpf set dentry xattr() and bpf remove dentry xattr() when they attempt to lock the inode of a supplied dentry without verifying if it is NULL. This happens when a negative dentry is passed, causing d inode(dentry) to return NULL and inode lock(inode) to trigger a crash. Additionally, the functions bpf xattr read permission() and bpf xattr write permission() contain WARN ON(!inode) calls that can be triggered by passing a negative dentry to bpf get dentry xattr() or its locked variants, potentially leading to a Denial of Service on systems where panic on warn is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.