Back to CVE records
Medium 5.5Published Sep 25, 2026
CVE-2026-100074bpf: Mark bpf_refcount field as unique
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a unique field, while it should be. Fix this oversight.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Undergoing Analysis
- Record last updated
- Sep 25, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d54730b50bae1f3119bd686d551d66f0fcc387ca before e42cede6f90177f4f92f80d3de18f628e61d2087; from d54730b50bae1f3119bd686d551d66f0fcc387ca before 641f814965d733936ca3618d4d5a12a8fa9be00e; from d54730b50bae1f3119bd686d551d66f0fcc387ca before 61e655391cb19c31f94ecd4354f624c81ce4cf75 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.4 before 6.18.52; from 6.19 before 7.2.6 | NVD |
References
- https://git.kernel.org/stable/c/e42cede6f90177f4f92f80d3de18f628e61d2087patch
- https://git.kernel.org/stable/c/641f814965d733936ca3618d4d5a12a8fa9be00epatch
- https://git.kernel.org/stable/c/61e655391cb19c31f94ecd4354f624c81ce4cf75patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.