CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period
Published May 6, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
eventpoll: defer struct eventpoll free to RCU grace period
In certain situations, epfree() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.
Affected Software
13 affected components
Linux Linux kernel
Linux Linux kernel>=6.4.1<6.6.136
Linux Linux kernel>=6.7<6.12.83
Linux Linux kernel>=6.13<6.18.24
Linux Linux kernel>=6.19<6.19.14
Linux Linux kernel=6.4
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
Linux Linux kernel=7.0-rc7
Event History
May 6, 2026
CVE Published
via MITRE·07:21 AM
Data Sourced
via MITRE·07:21 AM
DescriptionSeverity
Data Sourced
via Red Hat·10:03 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·10:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-43074?
CVE-2026-43074 has a severity rating of high with a CVSS score of 7.8.
2
How do I fix CVE-2026-43074?
You can fix CVE-2026-43074 by applying the available patch to the Linux kernel.
3
What kind of system is affected by CVE-2026-43074?
CVE-2026-43074 affects systems running the Linux kernel, specifically involving eventpoll functionalities.
4
What are the implications of CVE-2026-43074?
CVE-2026-43074 may allow concurrent threads to reference freed memory, leading to potential data corruption or crashes.
5
When was CVE-2026-43074 published?
CVE-2026-43074 was published on May 6, 2026.