CVE-2026-22994 - bpf: Fix reference count leak in bpf_prog_test_run_xdp()

CVE ID : CVE-2026-22994 Published : Jan. 23, 2026, 3:24 p.m. | 1 hour, 5 minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_run_xdp() syzbot is reporting unregister_netdevice: waiting for sit0 to become free. Usage count = 2 problem. A debug printk() patch found that a refcount is obtained at xdp_convert_md_to_buff() from bpf_prog_test_run_xdp(). According to commit ec94670fcb3b (