CVE-2026-74363

A flaw was found in the Linux kernel's BPF filesystem (bpffs). An incorrect inode cleanup process allowed an inode and its associated symlink data to be freed immediately, without proper synchronization. A local attacker could exploit this by concurrently unlinking a file while another process was still accessing its path. This could lead to a use-after-free vulnerability, potentially causing system instability or a denial of service.

This vulnerability is rated as Moderate impact because exploitation requires local system access and precise timing to trigger a race condition, with the primary outcome being a denial of service via kernel crash. To trigger the flaw, an authenticated user must concurrently unlink entries while another process traverses paths in the BPF filesystem. Standard Red Hat Enterprise Linux configurations restrict write privileges within the BPF filesystem mount to privileged accounts, significantly reducing exposure in typical production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.