PT-2026-4494 · Linux+2 · Linux Kernel+2

Syzbot

·

Published

2026-01-01

·

Updated

2026-06-16

·

CVE-2026-22994

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A reference count leak exists in the bpf prog test run xdp() function within the Linux kernel. The issue stems from an error handling path introduced by commit 1c1949982524, which failed to call xdp convert buff to md(), leading to an unreleased reference count obtained from xdp convert md to buff(). This was identified through reports from syzbot, indicating a potential resource leak during network device unregistration. The function xdp convert md to buff() obtains a refcount, intended to be released by xdp convert buff to md().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-07386
CVE-2026-22994
ECHO-2574-1D7B-1D76
OESA-2026-2417
OESA-2026-2418
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8393-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu