CVE-2026-74700

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Linux kernel within the tc new tfilter function. This occurs when two threads attempt to create filters (such as a u32 filter and a flower filter) in the same chain and priority. A short window allows a tcf proto to be referenced by an unrelated, unlocked classifier request. If a kind mismatch is detected and the reference count drops to zero, the tp->ops->destroy() function may execute without holding the rtnl lock. This can lead to a slab-use-after-free (UAF), which is a situation where the system continues to use a memory area after it has been marked as free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.