Medium severity5.5NVD Advisory· Published Sep 25, 2026· Updated Oct 21, 2026
CVE-2026-100074
CVE-2026-100074
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark bpf_refcount field as unique
BPF_REFCOUNT is not marked as a unique field, while it should be. Fix this oversight.
Affected products
4- osv-coords2 versions
>= 6.4.0, < 6.6.160+ 1 more
- (no CPE)range: >= 6.4.0, < 6.6.160
- (no CPE)range: < 7.2.9-1.1
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/61e655391cb19c31f94ecd4354f624c81ce4cf75nvdPatch
- git.kernel.org/stable/c/641f814965d733936ca3618d4d5a12a8fa9be00envdPatch
- git.kernel.org/stable/c/e42cede6f90177f4f92f80d3de18f628e61d2087nvdPatch
- git.kernel.org/stable/c/015f9fbcf3382c5eb563a157ee8cabb6fbfcfe5envd
- git.kernel.org/stable/c/20b3c72c1b83054c568d2322a95e217fdc281bc3nvd
News mentions
1- Linux Kernel: 25 Vulnerabilities Disclosed Together on September 25, 2026Vypr Intelligence · Sep 25, 2026