CVE-2026-23126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc5

Description The netdevsim driver lacks a protection mechanism for operations on the bpf bound progs list. Concurrent operations, specifically nsim bpf create prog() performing list add tail and nsim bpf destroy prog() performing list del, can lead to list corruption and a kernel crash. The crash occurs due to a race condition when adding and deleting entries from the list simultaneously. The list del entry valid or report function is implicated in the crash.

Recommendations Update to a version newer than 6.19.0-rc5.