CVE-2026-74576

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the slab memory allocator where cycles can form between kmalloc caches of different sizes when allocating obj exts arrays used for memory allocation profiling and memcg accounting. This occurs when one slab's obj exts array is allocated from a cache that in turn has its own obj exts array allocated from the first slab's cache. During the freeing process, the free slab() function can trigger free slab obj exts(), which calls kfree(), potentially leading to a recursive loop of discard slab() and free slab(). This unbounded recursion can exhaust the stack, resulting in a stack overflow. This behavior was observed on production hosts in the Meta fleet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.