A vulnerability classified as critical was found in Linux Kernel up to 6.1.160/6.6.120/6.12.65/6.18.5/6.19-rc5. Affected is the function bpf_prog_test_run_xdp. The manipulation results in improper update of reference count.

This vulnerability is cataloged as CVE-2026-22994. The attack must originate from the local network. There is no exploit available.

Upgrading the affected component is advised.