CVE-2026-74720

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where pointer state is not correctly preserved during commuted arithmetic. Specifically, when the operation scalar += pointer is processed within the adjust ptr min max vals() function, the destination register inherits the pointer state from the source pointer. Because pointer provenance—the history of a pointer's origin and transformations—is tracked across multiple bpf reg state fields, copying only selected fields is insufficient. This can lead to inconsistencies in parent identity fields and the loss of frame numbers for PTR TO STACK registers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.