CVE-2026-74609

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Transparent Inter-Process Communication (TIPC) implementation. The function tipc node link down() caches a link pointer before acquiring the node lock. If one CPU executes the function with the delete parameter set to true, it frees the link object using kfree(). Simultaneously, another CPU may have already cached that pointer and subsequently dereference it, leading to a use-after-free read in tipc link is establishing() and a use-after-free write via tipc link reset(). This occurs because the lock does not protect the cached pointer from being freed by a concurrent deletion process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.