CVE-2026-74715

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF conntrack kfuncs where the opts argument can point to a shared map value. The functions bpf nf ct lookup() and bpf nf ct alloc entry() read the opts->netns id variable separately during the acquisition and release of the network namespace reference. This can lead to a reference imbalance if the opts->netns id is modified by another CPU between these reads. Such an imbalance can result in the destruction of a live namespace, leading to a general protection fault, null-pointer dereference, and a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.