Use-after-free in Linux kernel - CVE-2026-74359

Vulnerability identifier: #VU142832

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-74359

CWE-ID: CWE-416

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a use-after-free in configfs_lookup() when handling subsequent getdents(2) operations in a directory after inode allocation failure. A local user can trigger inode allocation failure and then access the affected directory to cause a denial of service.

The issue occurs because a dangling pointer remains in the configfs_dirent structure and is later dereferenced to obtain an inode number.

Linux kernel
openEuler
bpftool
python3-perf-debuginfo
python3-perf
python2-perf-debuginfo
python2-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools
kernel-source
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
kernel
kernel-tools-debuginfo
kernel-headers

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
bpftool - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python3-perf-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python3-perf - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python2-perf-debuginfo - update to 4.19.90-2609.2.0.0390
python2-perf - update to 4.19.90-2609.2.0.0390
perf-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
perf - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools-devel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-source - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-devel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-debugsource - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
bpftool-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-headers - update to 5.10.0-334.0.0.235

• https://git.kernel.org/stable/c/10da12d352b7b2bb330a8609fdda9a58bf0e9856
• https://git.kernel.org/stable/c/3e83b2203aa59bd279e4f677ec793d49dc9d019e
• https://git.kernel.org/stable/c/57088b06109f3222963c639d8d743f42c2899b13
• https://git.kernel.org/stable/c/9c747dcee164ead300de90550ad9e4122f0d1bbb
• https://git.kernel.org/stable/c/b6e9c82522ddaa3ac0706b295ff4a71975d4f883
• https://git.kernel.org/stable/c/c3b073a209a9baa691b744318ac929fecdd8847c
• https://git.kernel.org/stable/c/eee07d769da5ac4e4f7bd0bc17828646a318d499

• Use-after-free in Linux kernel configfs
• openEuler 20.03 LTS SP4 update for kernel
• openEuler 22.03 LTS SP4 update for kernel