Race condition in Linux kernel - CVE-2026-74330

Vulnerability identifier: #VU142867

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-74330

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a race condition in configfs directory entry child traversal when traversing s_children lists while concurrent cursor movement or freeing can occur. A local user can trigger concurrent configfs operations to cause a denial of service.

The issue affects configfs directory handling in fs/configfs/dir.c.

Linux kernel
openEuler
bpftool
python3-perf-debuginfo
python3-perf
python2-perf-debuginfo
python2-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools
kernel-source
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
kernel
kernel-tools-debuginfo
kernel-headers

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
bpftool - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python3-perf-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python3-perf - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
python2-perf-debuginfo - update to 4.19.90-2609.2.0.0390
python2-perf - update to 4.19.90-2609.2.0.0390
perf-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
perf - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools-devel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-source - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-devel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-debugsource - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
bpftool-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-tools-debuginfo - addressed in versions 4.19.90-2609.2.0.0390, 5.10.0-334.0.0.235
kernel-headers - update to 5.10.0-334.0.0.235

• https://git.kernel.org/stable/c/459860529c109c5ce08b81c0776ca1200eaaeb4a
• https://git.kernel.org/stable/c/637ef4961470e04455102b34ac484a34d8eca0a4
• https://git.kernel.org/stable/c/77fd6f50f633a52c2db061e7d71d8cb486b0265e
• https://git.kernel.org/stable/c/91f289728ec706b7ff1ca0ee845dd73ff2253488
• https://git.kernel.org/stable/c/9b9e8bb81c41fd27e7b57a1c936fde140548535f
• https://git.kernel.org/stable/c/9e57e2863872e82e7c7237bc32299f67ebebc543
• https://git.kernel.org/stable/c/b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb
• https://git.kernel.org/stable/c/e6d93108e0a27d7e6f95c7e45017d14ba2900d32

• Race condition in Linux kernel configfs
• openEuler 20.03 LTS SP4 update for kernel
• openEuler 22.03 LTS SP4 update for kernel