CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period.
bpf: Free reuseport cBPF prog after RCU grace period.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Fixed in 7.0.0-geb7ac95ff75e #32 PREEMPT(full) - Compensating control
If you cannot patch immediately, reduce exposure by avoiding detach of reuseport cBPF programs from the setsockopt() path while UDP packets may still be in-flight to that reuseport group (prevents the fast path from starting while the prog is being freed).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52910?
The severity of CVE-2026-52910 is rated at 55.
What systems are affected by CVE-2026-52910?
CVE-2026-52910 affects the Linux kernel's handling of reuseport cBPF programs.
How do I fix CVE-2026-52910?
To fix CVE-2026-52910, ensure that you update your Linux kernel to the latest patched version.
What kind of vulnerability is CVE-2026-52910?
CVE-2026-52910 is a vulnerability related to the improper reuse of cBPF programs in the Linux kernel.
Who reported CVE-2026-52910?
CVE-2026-52910 was reported by Eulgyu Kim.