CVE-2026-74605

A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to cause a system crash or other unpredictable behavior due to a race condition during the freeing of an eventfs inode. The issue stems from improper synchronization when iterating over a specific...

CVE-2026-74606

A flaw was found in the Linux kernel's eventfs component. The eventfsremoverec function contains a use-after-free vulnerability where it attempts to access memory after it has been deallocated. This can occur during recursive removal of child entries. A local attacker could exploit this flaw to...

CVE-2026-74606

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...

CVE-2026-74605

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec()

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...

EUVD-2026-64543

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...

CVE-2026-74606

CVE-2026-74606 is a use-after-free vulnerability in the Linux kernel's eventfs component, specifically in eventfs_remove_rec(). When this function recursively removes a child entry, it subsequently reads list.next from that child via list_for_each_entry(). If free_ei() drops the final reference a...

CVE-2026-74605

A race condition in the Linux kernel's eventfs component occurs when an eventfs inode is freed. The ei->list field is a union with the RCU list head, and during SRCU-protected list iteration (without holding eventfs_mutex), a concurrent iterator may read the RCU head instead of the children li...

EUVD-2026-64542

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

CVE-2026-74606 eventfs: Fix use-after-free in eventfs_remove_rec()

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns, listforeachentry advances by reading list.next from the removed child...

CVE-2026-74605 eventfs: Use children field for rcu head and add memory barriers

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. As...

PT-2026-79610

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-is freed and then uses its ei-list to add it to the srcu link list as the list field is a union with the rcu list head. A...

Linux Distros Unpatched Vulnerability : CVE-2026-74605

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it sets ei-isfreed and then uses its ei-list to add it to the...

PT-2026-79611

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs remove rec eventfs remove rec recursively removes the child at the current loop position. After the recursive call returns, list for each entry advances by reading list.next from the removed...

Linux Distros Unpatched Vulnerability : CVE-2026-74606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Fix use-after-free in eventfsremoverec eventfsremoverec recursively removes the child at the current loop position. After the recursive call returns,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: eventfs: It was necessary to hold the eventfsmutex and SRCU when remounting events. The commit 340f0c7067a9 “eventfs: Update all the eventfsinodes from the events descriptor” had eventfsset attrs recursively traversing ei-childre...

eventfs: Hold eventfs_mutex and SRCU when remount walks events

...

SUSE CVE-2026-46106

In the Linux kernel, the following vulnerability has been resolved: eventfs: Hold eventfsmutex and SRCU when remount walks events Commit 340f0c7067a9 "eventfs: Update all the eventfsinodes from the events descriptor" had eventfssetattrs recurse through ei-children on remount. The walk only holds...

Linux Distros Unpatched Vulnerability : CVE-2026-46106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eventfs: Hold eventfsmutex and SRCU when remount walks events Commit 340f0c7067a9 eventfs: Update all the eventfsinodes from the events descriptor had...