CVE-2026-74371 bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat

In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes a smaller 'bpfattr' structure e.g. 40 bytes, which was the layout...

CVE-2026-74371

The CVE concerns the Linux kernel BPF_PROG_QUERY OOB write. BPF_PROG_QUERY unconditionally writes query.revision to userspace; if a smaller bpf_attr buffer is provided, this can cause an out-of-bounds write. The fixes propagate the user-supplied attribute size (uattr_size) down to the cgroup quer...