Search: CVE-2026-52938

A NULL pointer dereference vulnerability in the Linux kernel's BPF subsystem was fixed. The flaw occurs in bpf_sk_storage_clone and related diagnostic paths where a concurrent read can observe a NULL pointer, causing a kernel crash. The issue was addressed by adding NULL checks and refactoring code to prevent dereferencing NULL pointers. Multiple Linux kernel versions are affected, and fixes are available in later kernel releases. The vulnerability has a medium severity rating with no known exploits in the wild.