CVE-2026-74314: In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Ma
Summary
A vulnerability in the Linux kernel's eBPF (extended Berkeley Packet Filter, a in-kernel virtual machine) map handling was fixed by changing how special fields are cleaned up when map values are recycled. Previously, full field destruction could occur in NMI context (non-maskable interrupt, a high-priority CPU interrupt), which is unsafe for certain destructors like kptr (kernel pointer) cleaners and graph operations. The fix introduces a new NMI-safe cleanup function that only handles timers, workqueues, and task_work, while deferring more complex field destruction to the final cleanup phase.
Solution / Mitigation
The fix involves introducing bpf_obj_cancel_fields() for the reusable-value path that performs only NMI-safe cleanup for timer, workqueue, and task_work fields. Array and hashtab update/delete/recycle paths were switched to use this cancel helper instead of the full bpf_obj_free_fields() function. The bpf_obj_free_fields() function is retained for final map destruction and bpf_mem_alloc destructors.
Vulnerability Details
EPSS: 0.0%
August 15, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-74314
First tracked: August 15, 2026 at 08:08 AM
Classified by LLM (prompt v3) · confidence: 95%