[ CVE-2026-100074 · Published 25 Sep 2026 ]

Vulnerability in Linux

CVSS 5.5 EPSS <1%1 agency advisoryFix available

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUNT is not marked as a unique field, while it should be. Fix this oversight.

[ Fixes ]Fixes and patches

Patch on git.kernel.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
Patch on git.kernel.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
Patch on git.kernel.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ Advisories ]Government CERT advisories

BSI CERT-Bund27 Sep 2026WID-SEC-2026-3588

Linux Kernel: Multiple vulnerabilities Translated from German
CVE-2026-100076CVE-2026-100074CVE-2026-100079+11 more CVEs

[ References ]References

[ Facts ]Key facts

CVE: CVE-2026-100074
EUVD: EUVD-2026-87054
Published: 25 Sep 2026, 14:17 UTC
Updated: 21 Oct 2026, 13:18 UTC
NVD status: Undergoing Analysis
CVSS 3.1: 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Scored by nvd@nist.gov
EPSS: 0.11% chance of exploitation in 30 days · higher than 1% of CVEs

[ Affected ]Affected products

Linux Linuxd54730b50bae1f3119bd686d551d66f0fcc387ca – < 015f9fbcf3382c5eb563a157ee8cabb6fbfcfe5e, d54730b50bae1f3119bd686d551d66f0fcc387ca – < 20b3c72c1b83054c568d2322a95e217fdc281bc3, d54730b50bae1f3119bd686d551d66f0fcc387ca – < e42cede6f90177f4f92f80d3de18f628e61d2087, d54730b50bae1f3119bd686d551d66f0fcc387ca – < 641f814965d733936ca3618d4d5a12a8fa9be00e, d54730b50bae1f3119bd686d551d66f0fcc387ca – < 61e655391cb19c31f94ecd4354f624c81ce4cf75

[ Description ]Official description

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

Linux Kernel: Multiple vulnerabilities Translated from German

[ References ]References