CVE-2026-74348

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the ocfs2/dlm component. The debug lockres open() function copies a pointer from inode->i private into a debug lockres structure, but it ignores the return value of the dlm grab() function. If the last domain unregister has already removed the context from dlm domains, dlm grab() returns NULL, yet the open operation still stores the raw pointer and returns success. Subsequently, debug lockres release() calls dlm put() using this pointer after dlm free ctxt mem() has already freed the context memory. This occurs because the release path is outside the debugfs removal barrier.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.