CVE-2026-74590

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bpf get fsverity digest() function where it incorrectly assumes the stability of memory contents referenced by a dynptr (a BPF dynamic pointer abstraction). While the BPF verifier ensures the memory space remains valid, it does not guarantee the contents are stable. Consequently, the system could crash if the arg->digest size variable is modified concurrently. The fix involves using the hash alg->digest size value and updating the dynptr sz and out digest sz variables to u64 to align with the return type of bpf dynptr size().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.