CVE-2026-74672

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the Linux kernel due to a race condition between ptdump and vmap page table freeing. The vmap logic promotes page tables to huge leaf entries and frees the lower page table without holding sufficient locks against concurrent ptdump walks. This allows ptdump, which uses the walk page range debug() function to walk ranges it does not own, to access memory that has been freed.

Additionally, the x86 Change Page Attributes (CPA) logic can cause a similar UAF when collapsing huge ranges in parallel with a ptdump walk. The issue also affects x86 and arm64 when walking non-kernel memory management (mm) structures, as kernel mappings may become unstable if the init mm is not locked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.