CVE-2026-45951

bpf: Fix a potential use-after-free of BTF object

High · published May 27, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a potential use-after-free of BTF object

Refcounting in the check_pseudo_btf_id() function is incorrect:

the __check_pseudo_btf_id() function might get called with a zero

refcounted btf. Fix this, and patch related code accordingly.

v3: rephrase a comment (AI)

v2: fix a refcount leak introduced in v1 (AI)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.9th percentile
Published
2026-05-27T12:18Z
EPSS history
Timeline
  • 27 MAY 12:18Z
    bpf: Fix a potential use-after-free of BTF object
    cvelistv5