CVE-2026-31526

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. When an exception occurs during the execution of a BPF subprogram, the system may fail to release user-acquired locks. This oversight can lead to resource leaks and system instability, potentially resulting in a Denial of Service (DoS) condition.

Verifier now enforces lock leak checks on bpf_throw() exception exits from subprograms, matching real unwind behavior. Red Hat notes impact is confined to verified BPF programs that use exceptions with RCU/preempt/irq state; typical production programs should fail verification until fixed. Ship via kernel errata.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.