Threats Tagged 'cve-2026-23319'

A use-after-free (UAF) vulnerability was identified and fixed in the Linux kernel's BPF subsystem, specifically in the function bpf_trampoline_link_cgroup_shim. The flaw occurs due to a race condition where a resource is considered released but still referenced, allowing a potential use-after-free during a deferred cleanup window. The issue was addressed by adding an atomic non-zero reference count check to prevent incrementing the refcount if it is already zero. This vulnerability affects multiple Linux kernel versions prior to 6.8.0-1064.72 and related builds. A patch is available and included in official Ubuntu security updates. The CVSS v3.1 score is 7.8, indicating a high severity impact on confidentiality, integrity, and availability. No known exploits are reported in the wild.