CVE-2026-74305

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. This vulnerability allows a program without cgroup storage to bypass compatibility checks when bridging tail call chains. This could enable unintended interactions between programs with and without cgroup storage, potentially leading to a security bypass.

This vulnerability is rated as Moderate because successful exploitation requires local access with administrative privileges (such as CAP_BPF or CAP_SYS_ADMIN) to load custom programs and manage control group attachments. In default Red Hat Enterprise Linux environments, unprivileged users cannot manipulate or load BPF programs of this type. Consequently, the flaw cannot be triggered remotely or by unprivileged local users under standard configurations, significantly limiting the overall attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.