CVE-2026-98813

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) subsystem. During the teardown of certain BPF hash maps, the memory allocator destructor failed to retain a reference to the map's BPF Type Format (BTF) metadata, allowing the metadata to be freed while background cleanup tasks were still accessing it. A local user could exploit this vulnerability to trigger a use-after-free condition, resulting in a system crash and Denial of Service (DoS) or potential privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.