CVE-2026-74337

A flaw was found in the Linux kernel, specifically within the BPF Berkeley Packet Filter subsystem. This vulnerability allows NMI Non-Maskable Interrupt and tracepoint BPF programs to re-enter certain internal locks, known as LRU Least Recently Used locks, while they are already held. This re-ent...

CVE-2026-74337

CVE-2026-74337 describes a Linux kernel vulnerability where NMI/tracepoint BPF programs could re-enter per-CPU or global LRU locks held by bpf_lru_pop_free()/push_free(), causing AA-deadlock. The fix converts LRU lock sites to rqspinlock_t and adds a recovery path for failure windows to avoid nod...

Linux Distros Unpatched Vulnerability : CVE-2026-74337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree...