CVE-2026-74436

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rxrpc component where the rxrpc kernel charge accept() function reads rx->backlog without proper socket or backlog synchronization. This raw pointer is then passed to rxrpc service prealloc one(). If a concurrent rxrpc discard prealloc() function sets rx->backlog to NULL and frees the backlog rings, a kernel preallocation worker may continue to use the freed struct rxrpc backlog while updating * backlog head, * backlog tail, and array slots.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.