by Kastro
Paper/Archive/CVE-2026-74433

CVE-2026-74433

Linux Linux — rxrpc: Fix UAF in rxgk_issue_challenge()

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.1.511 × 2010.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.

Affected

ProductAffectedFixed inSource
Linux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a – < 844b8525ce503405c462ad67f750bec648720397844b8525ce503405c462ad67f750bec648720397CNA
Linux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a – < 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed883bb0ed050e2ad9453d8ef50e4d6e624eac6eed8CNA
Linux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a – < 107a4cb0d47e735830f852d83970d5c81f8e1e08107a4cb0d47e735830f852d83970d5c81f8e1e08CNA
Linux6.166.18.40CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397refgit.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8refgit.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08