CVE-2026-74512

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the audit system. The audit del rule() function destroys e->rule.exe through audit remove mark rule() before the rule is unlinked from RCU-visible filter lists and a grace period is observed. This allows concurrent readers in audit filter() and audit filter rules() to dereference e->rule.exe while the fsnotify mark is being freed, creating a window for memory corruption. RCU (Read-Copy-Update) is a synchronization mechanism that allows multiple readers to access data while it is being updated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.