BPF Exception Handling Flaw in Linux Kernel by Linux Foundation

CVE-2026-31526

What is CVE-2026-31526?

A critical exception handling flaw in the Linux kernel's BPF subsystem can lead to resource leaks and potential system instability. The vulnerability arises during the execution of static subprograms, where the handling of exception exits may bypass necessary cleanup processes, leaving user-acquired locks unaddressed. The error message prefix has been updated in the latest patches to ensure clear identification of issues related to the bpf_throw function. Users of affected Linux kernel versions are advised to update to mitigate associated risks.

References