CVE-2026-74736

A vulnerability in the Linux kernel 's net/sched cls_bpf classifier allowed a device-bound (offloaded) eBPF program to be attached to a different network device than the one it was bound to. The function cls_bpf_prog_from_efd() retrieved a SCHED_CLS program via bpf_prog_get_type_dev() but never v...