CVE-2026-74330

High

Description

In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from removal by another thread, but it does *not* protect cursors from being moved around by lseek() - or freed, for that matter.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux77fd6f50f633a52c2db061e7d71d8cb486b0265e, 91f289728ec706b7ff1ca0ee845dd73ff2253488, b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb, 9e57e2863872e82e7c7237bc32299f67ebebc543, 459860529c109c5ce08b81c0776ca1200eaaeb4a, 637ef4961470e04455102b34ac484a34d8eca0a4, e6d93108e0a27d7e6f95c7e45017d14ba2900d32, 9b9e8bb81c41fd27e7b57a1c936fde140548535f or later

Affected products

ProductAffected versionsFixed in
Linux Linux6f61076406251626be39651d114fac412b1e0c39 ≤ v < 77fd6f50f633a52c2db061e7d71d8cb486b0265e, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < 91f289728ec706b7ff1ca0ee845dd73ff2253488, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < 9e57e2863872e82e7c7237bc32299f67ebebc543, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < 459860529c109c5ce08b81c0776ca1200eaaeb4a, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < 637ef4961470e04455102b34ac484a34d8eca0a4, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < e6d93108e0a27d7e6f95c7e45017d14ba2900d32, 6f61076406251626be39651d114fac412b1e0c39 ≤ v < 9b9e8bb81c41fd27e7b57a1c936fde140548535f, 2.6.2777fd6f50f633a52c2db061e7d71d8cb486b0265e, 91f289728ec706b7ff1ca0ee845dd73ff2253488, b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb, 9e57e2863872e82e7c7237bc32299f67ebebc543, 459860529c109c5ce08b81c0776ca1200eaaeb4a, 637ef4961470e04455102b34ac484a34d8eca0a4, e6d93108e0a27d7e6f95c7e45017d14ba2900d32, 9b9e8bb81c41fd27e7b57a1c936fde140548535f

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.