PT-2026-72965

CVE-2026-74513

·

Published

2026-08-15

·

Updated

2026-11-03

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the dibs loopback attach, detach, and unregister processes. The functions dibs lo attach dmb(), dibs lo detach dmb(), and dibs lo unregister dmb() look up the dmb node under the dmb ht lock, but release the lock before operating on the node's refcount. This creates a race condition where a concurrent process can remove the node from the hash table and free it via dibs lo unregister dmb() before the refcount operation occurs, leading to a use-after-free scenario.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4706-1
USN-8959-1
USN-8960-1
Found an issue in the description? Have something to add? Feel free to write us 👾