CVE-2026-74433

Critical

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.

SeverityCritical
CVSS9.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux844b8525ce503405c462ad67f750bec648720397, 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8, 107a4cb0d47e735830f852d83970d5c81f8e1e08 or later

Affected products

ProductAffected versionsFixed in
Linux Linux9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a ≤ v < 844b8525ce503405c462ad67f750bec648720397, 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a ≤ v < 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8, 9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a ≤ v < 107a4cb0d47e735830f852d83970d5c81f8e1e08, 6.16844b8525ce503405c462ad67f750bec648720397, 83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8, 107a4cb0d47e735830f852d83970d5c81f8e1e08

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-74433 · Linux · Dark Radar