SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-74433

CRITICAL · CVSS 9.8 EPSS 0.35%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A use-after-free vulnerability exists in the Linux kernel's `rxgk_issue_challenge()` function, which can lead to potential memory corruption and exploitation. This issue affects systems utilizing the Linux kernel and could allow an attacker to execute arbitrary code or cause a denial of service. Organizations running Linux-based systems, particularly those relying on the affected components, should prioritize patching to mitigate the risk.

CVE
CVE-2026-74433
Severity
CRITICAL
CVSS
9.8
EPSS
0.35%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.