CVE-2026-52938

The CVE-2026-52938 issue concerns a NULL pointer dereference in the Linux kernel BPF storage paths. The root cause is that bpf_selem_unlink_nofail() sets selem->smap to NULL, and a concurrent reader in bpf_sk_storage_clone() may observe the element still on the list with a NULL smap, leading t...