CVE-2026-74369

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (u-a-f) issue exists in the liveupdate component. The problem occurs in the luo file unpreserve files() and luo file finish() functions due to the incorrect ordering of module put() and xa erase(). Specifically, the luo get id() function dereferences fh->ops->get id, meaning the module reference must be maintained until xa erase() (which invokes luo get id()) has finished executing to ensure the file handler module remains pinned during access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.