CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule()

Published Aug 15, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

audit: fix potential use-after-free in auditdelrule()

auditdelrule() destroys e->rule.exe via auditremovemarkrule() before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilter() and auditfilterrules() still dereference e->rule.exe, while the fsnotify mark can be freed on an independent lifetime path. This creates a use-after-free window during rule deletion.

Fix this by unlinking the rule from the RCU-visible lists and invoking synchronizercu() before calling auditremovemarkrule() (and other rule removal helpers). This ensures that all existing RCU readers have exited the critical section before any underlying resources are destroyed.

Affected Software

1 affected component
Linux Linux kernel

Event History

Aug 15, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-74512?

CVE-2026-74512 has a risk rating of 44.

2

How do I fix CVE-2026-74512?

To fix CVE-2026-74512, update the Linux kernel to the latest version where this vulnerability has been addressed.

3

What types of systems are affected by CVE-2026-74512?

CVE-2026-74512 affects systems running vulnerable versions of the Linux kernel.

4

What could happen if CVE-2026-74512 is exploited?

Exploitation of CVE-2026-74512 could lead to potential system instability or a denial-of-service condition.

5

Is CVE-2026-74512 a common vulnerability?

CVE-2026-74512 is a specific vulnerability in the Linux kernel that may not be common but poses serious risks if exploited.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203