CVE-2026-74342

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the Linux kernel when creating a cgroup directory under /sys/fs/cgroup on SELinux-enabled distributions. The issue arises because the LSM kernfs init security hook is invoked within kernfs new node() before the kn-> parent and kn->dir.root fields are initialized. When selinux kernfs init security() calls kernfs xattr set(), the function kernfs root(kn) returns NULL, leading to a kernel panic during the attempt to access the xa cache offset. This flaw affects the kernfs xattr set() and kernfs xattr get() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.