CVE-2026-74314: Linux 5.19

Affected technology

Linux · 14a324f6a67ef6a53e04362a70160a47eb8afffa to before 9ea734e2cc0143d7429ab7dc0b20c85e5836183c, 14a324f6a67ef6a53e04362a70160a47eb8afffa to before a3a81d247651218e47153f2d2afd7aee236726fd, f0462d38589422bc9e27fd3c6343dfeb6b3db2f9, 5.18.18 to before 5.19
Linux

Linux · 5.19
Linux

Component: Not specified by the source
File: include/linux/bpf.h, kernel/bpf/arraymap.c, kernel/bpf/hashtab.c, kernel/bpf/syscall.c, tools/testing/selftests/bpf/prog_tests/htab_update.c, tools/testing/selftests/bpf/prog_tests/linked_list.c, tools/testing/selftests/bpf/prog_tests/map_kptr.c, tools/testing/selftests/bpf/prog_tests/refcounted_kptr.c, tools/testing/selftests/bpf/progs/htab_update.c, tools/testing/selftests/bpf/progs/linked_list.c, tools/testing/selftests/bpf/progs/refcounted_kptr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Already have weaker guarantees as parallel users can recreate freed fields before the new element becomes visible again. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.