PT-2026-4494 · Linux+2 · Linux Kernel+2
Syzbot
·
Published
2026-01-01
·
Updated
2026-06-16
·
CVE-2026-22994
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A reference count leak exists in the
bpf prog test run xdp() function within the Linux kernel. The issue stems from an error handling path introduced by commit 1c1949982524, which failed to call xdp convert buff to md(), leading to an unreleased reference count obtained from xdp convert md to buff(). This was identified through reports from syzbot, indicating a potential resource leak during network device unregistration. The function xdp convert md to buff() obtains a refcount, intended to be released by xdp convert buff to md().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Missing Release of Resource after Effective Lifetime
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu