CVE-2026-74433

Summary

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix UAF in rxgk_issue_challenge()

Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a < 844b8525ce503405c462ad67f750bec648720397affected
LinuxLinux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a < 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8affected
LinuxLinux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a < 107a4cb0d47e735830f852d83970d5c81f8e1e08affected
LinuxLinux6.16affected
LinuxLinux0 < 6.16unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References