EUVD-2026-95533

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpflinkprime inserts a link into linkidr before anoninodegetfile succeeds and before bpflinksettle publishes the ID in link-id. bpflinkbyid treats such an ID-zero link as unsettled, but...

CVE-2026-98378

The Linux kernel contains a vulnerability in the bpf subsystem where the link iterator fails to skip unsettled links. Specifically, bpf_link_prime() inserts a link into link_idr before bpf_link_settle() publishes its ID. While bpf_link_by_id() correctly treats ID-zero links as unsettled, the link...

CVE-2026-23319: Use After Free

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a UAF issue in bpftrampolinelinkcgroupshim The root cause of this bug is that when 'bpflinkput' reduces the refcount of 'shimlink-link.link' to zero, the resource is considered released but may still be referenced via...