CVE-2026-23126

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netdevsim: fix a race issue related to the operation on bpf_bound_progs list

The netdevsim driver lacks a protection mechanism for operations on the

bpf_bound_progs list. When the nsim_bpf_create_prog() performs

list_add_tail, it is possible that nsim_bpf_destroy_prog() is

simultaneously performs list_del. Concurrent operations on the list may

lead to list corruption and trigger a kernel crash as follows:

[ 417.290971] kernel BUG at lib/list_debug.c:62!

[ 417.290983] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI

[ 417.290992] CPU: 10 PID: 168 Comm: kworker/10:1 Kdump: loaded Not tainted 6.19.0-rc5 #1

[ 417.291003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014

[ 417.291007] Workqueue: events bpf_prog_free_deferred

[ 417.291021] RIP: 0010:__list_del_entry_valid_or_report+0xa7/0xc0

[ 417.291034] Code: a8 ff 0f 0b 48 89 fe 48 89 ca 48 c7 c7 48 a1 eb ae e8 ed fb a8 ff 0f

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References