CVE-2026-98036

A flaw was found in the Linux kernel's BPF (Berkeley Packet Filter) subsystem. A local user with permission to run BPF programs can trigger a use-after-free condition, potentially leading to a system crash, denial of service (DoS), or privilege escalation. This flaw occurs during the recycling of resizable hash table elements, where the kernel overwrites references to active timers before they are cancelled. As a result, the timer callback executes with memory pointers referencing already-freed memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.