CVE-2026-74608

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the SMB client. The cifs try adding channels() function takes a temporary reference to an interface before releasing the iface lock. If the cifs ses add channel() function fails, the reference is dropped before the weight fulfilled variable of the iface structure is incremented. A concurrent interface list refresh can remove the list reference during channel creation, causing the kref put() function in the failure path to release the final reference and free the iface memory. Subsequent updates to weight fulfilled then result in an access to freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.