CVE-2026-74662

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the inet frag create() function where the fragment queue timer is armed before the queue is inserted into the fqdir rhashtable. If the namespace fragment timeout is zero or negative, the timer may execute before the queue is published. This sequence allows the timer callback to mark the queue as complete and attempt to remove a node not yet present in the hash table, leading to a dropped hash reference. Consequently, the system may publish a completed queue without restoring the reference, resulting in a stale hash node after the final reference is dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.