CVE-2026-74370: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo_session_retrieve() Extend the scope of the rwsem_read lock in luo_session_retrieve() to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the session between the lookup and the mutex lock.

Засегнати продукти

• Linux Linux: 0153094d03df5a2e834a19c59b255649a258ae46 преди d944170607b872a1f93713c555ad3f0efde3a9b8; 0153094d03df5a2e834a19c59b255649a258ae46 преди d3ae9e7fddb4036f50003d7fa1ef52801fdb961b
• Linux Linux: 6.19; преди 6.19; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-74370
• https://nvd.nist.gov/vuln/detail/CVE-2026-74370
• https://git.kernel.org/stable/c/d944170607b872a1f93713c555ad3f0efde3a9b8
• https://git.kernel.org/stable/c/d3ae9e7fddb4036f50003d7fa1ef52801fdb961b