CVE-2026-74662

In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer before inserting the queue into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer can run before th...

CVE-2026-74662

CVE-2026-74662 is a race condition in the Linux kernel IP fragment reassembly path (inet: frags). The function inet_frag_create() arms the fragment queue timer before inserting the queue into the fqdir rhashtable. When the namespace fragment timeout is zero or negative, the timer can fire before ...