CVE-2026-52938
kernel: bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) storage. A race condition can occur where a storage element is accessed after its associated map has been deallocated, leading to a null pointer dereference. This can cause a kernel crash, resulting in a Denial of Service (DoS) for the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference