PT-2026-43818 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45951

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a potential use-after-free of BTF object

Refcounting in the check pseudo btf id() function is incorrect: the check pseudo btf id() function might get called with a zero refcounted btf. Fix this, and patch related code accordingly.

v3: rephrase a comment (AI) v2: fix a refcount leak introduced in v1 (AI)

Fix

Related Identifiers

CVE-2026-45951

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-45951 · Security Note
• https://git.kernel.org/stable/c/eac65c272f3b49021a843cba5107d63627395e0e · Note
• https://git.kernel.org/stable/c/9ff46ffeecdb1802d6e26183177935b948a12e7f · Note
• https://git.kernel.org/stable/c/ccd2d799ed4467c07f5ee18c2f5c59bcc990822c · Note