In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's… (CVE-2026-74354)
A vulnerability in the Linux kernel related to the BPF subsystem's zap_pages() function has been resolved. The issue involved improper locking of the mmap_lock in zap_pages(), which is required by zap_vma_range(). The fix involves adjusting lock acquisition order and adding serialization to prevent concurrent callers from interfering with each other's operations. No CVSS score or exploit details are available.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's BPF subsystem concerned the zap_pages() function not properly taking the owning memory management's mmap_lock as required by zap_vma_range(). The original code risked deadlock due to an AB-BA lock order between mmap_read_lock and arena->lock. The fix drops arena->lock before acquiring mmap_read_lock, re-resolves the virtual memory area, and serializes zap_pages() callers with a new arena->zap_mutex to prevent concurrent interference. This corrects the locking logic and ensures safe memory unmapping operations.
Potential Impact
The vulnerability could lead to deadlocks or inconsistent memory management states within the kernel's BPF subsystem due to improper locking order and concurrency issues. This may affect system stability or reliability but no direct exploitation or privilege escalation details are provided.
Mitigation Recommendations
A fix has been applied to the Linux kernel to correct the locking order and add serialization in zap_pages(). Users should update to the fixed kernel version once available. Patch status is not yet confirmed in the provided data; check the official Linux kernel advisories or vendor updates for the current remediation status.
In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's… (CVE-2026-74354)
Description
A vulnerability in the Linux kernel related to the BPF subsystem's zap_pages() function has been resolved. The issue involved improper locking of the mmap_lock in zap_pages(), which is required by zap_vma_range(). The fix involves adjusting lock acquisition order and adding serialization to prevent concurrent callers from interfering with each other's operations. No CVSS score or exploit details are available.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's BPF subsystem concerned the zap_pages() function not properly taking the owning memory management's mmap_lock as required by zap_vma_range(). The original code risked deadlock due to an AB-BA lock order between mmap_read_lock and arena->lock. The fix drops arena->lock before acquiring mmap_read_lock, re-resolves the virtual memory area, and serializes zap_pages() callers with a new arena->zap_mutex to prevent concurrent interference. This corrects the locking logic and ensures safe memory unmapping operations.
Potential Impact
The vulnerability could lead to deadlocks or inconsistent memory management states within the kernel's BPF subsystem due to improper locking order and concurrency issues. This may affect system stability or reliability but no direct exploitation or privilege escalation details are provided.
Mitigation Recommendations
A fix has been applied to the Linux kernel to correct the locking order and add serialization in zap_pages(). Users should update to the fixed kernel version once available. Patch status is not yet confirmed in the provided data; check the official Linux kernel advisories or vendor updates for the current remediation status.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g336-8h5f-6m63
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-74354"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b6abf8831d5394f6353
Added to database: 08/15/2026, 15:53:14 UTC
Last enriched: 08/15/2026, 16:05:05 UTC
Last updated: 08/15/2026, 16:05:05 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.