{
  "cveId": "CVE-2026-52938",
  "url": "https://patchblox.com/security/cve/CVE-2026-52938",
  "summary": "CVE-2026-52938 is fixed in linux on 1 platform by DEBIAN-CVE-2026-52938 (version 7.0.14-1), released July 12, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix NULL pointer dereference in bpf_sk_stor...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths  bpf_selem_unlink_nofail() sets SDATA(selem)-\u003Esmap to NULL before removing the selem from the storage hlist. A concurrent RCU reader in bpf_sk_storage_clone() can observe the selem still on the list with smap already NULL, causing a NULL pointer dereference.   general protection fault, probably for non-canonical address 0xdffffc000000000a:  KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057]  RIP: 0010:bpf_sk_storage_clone\u002B0x1cd/0xaa0 net/core/bpf_sk_storage.c:174  Call Trace:   \u003CIRQ\u003E   sk_clone\u002B0xfed/0x1980 net/core/sock.c:2591   inet_csk_clone_lock\u002B0x30/0x760 net/ipv4/inet_connection_sock.c:1222   tcp_create_openreq_child\u002B0x35/0x2680 net/ipv4/tcp_minisocks.c:571   tcp_v4_syn_recv_sock\u002B0x123/0xf90 net/ipv4/tcp_ipv4.c:1729   tcp_check_req\u002B0x8e1/0x2580 include/net/tcp.h:855   tcp_v4_rcv\u002B0x1845/0x3b80 net/ipv4/tcp_ipv4.c:2347  Add a NULL check for smap in bpf_sk_storage_clone().  bpf_sk_storage_diag_put_all() has the same issue. Add a NULL check and pass the validated smap directly to diag_get(), which is refactored to take smap as a parameter instead of reading it internally.  bpf_sk_storage_diag_put() uses diag-\u003Emaps[i] which is always valid under its refcount, so diag-\u003Emaps[i] is passed directly to diag_get().",
  "published": "2026-06-24T08:16:24Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00143,
  "epssPercentile": 0.03654,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.14-1",
      "fix": "DEBIAN-CVE-2026-52938",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-52938",
      "released": "2026-07-12T16:12:05Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}