CVE-2026-74715 - bpf: Fix netns reference imbalance in conntrack kfuncs
Brief
CVE ID : CVE-2026-74715
Published : Aug. 22, 2026, 4:16 p. m.
- 4 hours, 54 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix netns reference imbalance in conntrack kfuncs
The opts argument of the BPF conntrack kfuncs can point to a shared map value. __bpf_nf_ct_lookup() and __bpf_nf_ct_alloc_entry() read opts-netns_id separately when acquiring and releasing the network namespace reference.
The reference imbalance can occur as follows: