CVE-2026-74715 describes a vulnerability in the Linux kernel's BPF conntrack kernel functions where the opts argument can point to a shared map value. The functions __bpf_nf_ct_lookup() and __bpf_nf_ct_alloc_entry() read opts->netns_id separately when acquiring and releasing the network namespace reference, causing a reference imbalance. This imbalance can lead to leaking references or destroying a live network namespace, resulting in kernel crashes such as general protection faults and null pointer dereferences. The fix involves snapshotting every input field of opts with READ_ONCE() before validation or use, ensuring balanced get/put pairs for the network namespace and stable option values during invocation.

The vulnerability can cause reference leaks or premature destruction of live network namespaces, leading to kernel panics and crashes. This impacts system stability and reliability but does not directly indicate privilege escalation or remote code execution based on the provided data.

A fix for this vulnerability has been implemented in the Linux kernel by snapshotting input fields to maintain balanced network namespace references. Users should apply the official kernel updates that include this fix. Patch status is not explicitly stated in the provided data; therefore, check the vendor or Linux kernel advisories for the current remediation guidance.