Race condition in Linux kernel - CVE-2026-74601
Published: August 24, 2026
Vulnerability identifier: #VU144963
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74601
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a race condition in ring_buffer_swap_cpu() when swapping per-cpu ring buffers during an active write operation. A local user can trigger a buffer swap at a moment when the committing counter temporarily drops to zero to cause a denial of service.
The issue can lead to an inconsistent buffer state and trigger the RB_WARN_ON in rb_commit().
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74601
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1
External References
- https://git.kernel.org/stable/c/22709117d9ae95e52673685f98caac7c356a8227
- https://git.kernel.org/stable/c/26662bc8fced1d668fa1aa146eda085bfc67bd0b
- https://git.kernel.org/stable/c/597f279b7b4a06412e3d965e98cc36e181cdbede
- https://git.kernel.org/stable/c/5b926fb04cb9ef3156dcf88c69a59d3d1a1c4f9f
- https://git.kernel.org/stable/c/5e6e2a18c20e88167d414f666032792e8bf19b80
- https://git.kernel.org/stable/c/6b524e6b234e45c7f5f90d13b042c6f57f80105c
- https://git.kernel.org/stable/c/ad7e10c7ea89af45ac1bf1814855d45da472703d
- https://git.kernel.org/stable/c/f27bdc43077e4fcb5557dfc315ee8d91e741f483