CVE-2026-74605

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the eventfs component where an inode is freed by setting ei->is freed and using ei->list to add it to the SRCU (Sleepable Read-Copy Update) link list. Because the list field is a union with the RCU list head and is iterated over without the eventfs mutex, the iteration may read ei->rcu instead of ei->list, leading to the reading of a corrupt target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.