CVE-2026-74465

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the Open vSwitch implementation of the Linux kernel. The attach meter() function makes a newly created meter visible to other CPUs before completing all checks; if the function subsequently fails, it detaches the meter. However, the ovs meter cmd set() function performs a kfree(meter) upon failure without waiting for RCU (Read-Copy-Update) readers to stop using the meter. This can be triggered by a custom application using the uAPI, leading to a slab-use-after-free in the ovs meter execute() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.