Use-After-Free in Linux mtk_eth_soc Ethernet Driver eBPF Handling

Publication date: 2026-03-25

Last updated on: 2026-05-22

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Reset eBPF program pointer to old_prog and do not decrease its ref-count if mtk_open routine in mtk_xdp_setup() fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-25

Last Modified

2026-05-22

Generated

2026-07-06

AI Q&A

2026-03-25

EPSS Evaluated

2026-07-05

NVD

CVE-2026-23284

EUVD

EUVD-2026-15208

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 6.19.7 (exc)
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	From 6.13 (inc) to 6.18.17 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.130 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.77 (exc)
linux	linux_kernel	From 6.0 (inc) to 6.1.167 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's ethernet driver for MediaTek SoC (mtk_eth_soc). It involves the handling of eBPF program pointers during the setup process in the mtk_xdp_setup() function. Specifically, if the mtk_open routine within mtk_xdp_setup() fails, the eBPF program pointer is reset to an old program pointer (old_prog) without decreasing its reference count, which could lead to improper management of eBPF programs.

Impact Analysis

Improper handling of eBPF program pointers and reference counts could potentially lead to resource leaks or instability in the network driver. This might affect system reliability or performance, especially in environments relying on eBPF for network packet processing. However, no specific impact details or exploit scenarios are provided.

Hi! I’m here to help you understand CVE-2026-23284. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70