CVE-2026-74605

A race condition in the Linux kernel's eventfs component occurs when an eventfs inode is freed. The ei->list field is a union with the RCU list head, and during SRCU-protected list iteration (without holding eventfs_mutex), a concurrent iterator may read the RCU head instead of the children li...

PT-2026-79666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mac802154 beacon worker function. The function reads local-beacon req under RCU Read-Copy-Update, a synchronization mechanism and derives the...

Linux Distros Unpatched Vulnerability : CVE-2026-74656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fix use-after-free in fibnhcupdatemtu fibnhcupdatemtu walks the nexthop exception table under RTNL, but RTNL does not serialize this walk with PMTU...

CVE-2026-74605: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

CVE-2026-74630: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can clear the pointer and drop the last reference between these operations...

PT-2026-79635

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.2-rc3 Description A use-after-free issue exists in the IPv6 implementation where the in6 dev get function reads dev-ip6 ptr under RCU Read-Copy-Update and unconditionally increments its reference count. During device...

Linux Distros Unpatched Vulnerability : CVE-2026-74630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: prevent in6devget from resurrecting inet6dev in6devget reads dev-ip6ptr under RCU and then unconditionally increments its refcount. Device teardown can...

AZL-96998 CVE-2026-74583 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74583

CVE-2026-74583 is a use-after-free race condition in the Linux kernel's cls_route classifier (route4 fastmap cache). The route4_set_fastmap() reader can write a filter pointer into the 16-slot fastmap cache after a concurrent writer (route4_delete/route4_change) has already cleared it via route4_...

EUVD-2026-64005

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

CVE-2026-74583 net/sched: cls_route: fix fastmap use-after-free on filter

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4filter pointers indexed by id, iif. The reader route4classify populates this cache via...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001466)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001466 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DF...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102092 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4srqevent Sashiko points out the radixtree itself is RCU safe...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102070 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in...

CVE-2026-74392

A flaw was found in the Linux kernel's device mapper dm component. When iouring with IOPOLL is used on a dm-stripe target, a task can enter a prolonged spinning poll loop. This can lead to an RCU Read-Copy Update CPU stall, causing a Denial of Service DoS for the affected system...

CVE-2026-74563

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS TCP module. The rdstcpladdrcheck function fails to hold the Read-Copy-Update RCU lock across an IPv6 address check. This allows a race condition where a network device can be freed while still being referenced, leading to a...

SUSE CVE-2026-72139

In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if needsmd5 tcpaodestroysocksk, false; else if needsao tcpclearmd5listsk;...

SUSE CVE-2026-72069

In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in rtspinunlock rtspinunlock releases the RCU protection before unlocking the lock. That opens the door for the following UAF scenario: T1 T2 spinlock&p-lock; rcureadlock; invalidatep;...

ANT-2026-CM0TCREP · torvalds/linux · Use-After-Free

use-after-free high CVE-2026-43074 Severity Claude high · Security research firm - · Maintainer high REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-CM0TCREP: UAF in epgetupwardsdepthproc giving unprivileged LPE During epollctlA, EPOLLCTLADD, B, the nesting-depth check...

Linux Distros Unpatched Vulnerability : CVE-2026-72094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-buf: dma-fence: Fix potential NULL pointer dereference The commit mentioned in the fixes tag below introduced a mechanism through which fence producers can...