9.8

CVE-2026-74608: linux

CVSS: 9.8v3.1CriticalReceived
AliasesUBUNTU-CVE-2026-74608DEBIAN-CVE-2026-74608
Published 22-08-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-74608 is a critical (CVSS 9.8) vulnerability in linux. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 39.8% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.48%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 4
MGASA-2026-0506SUSE-SU-2026:4640-1SUSE-SU-2026:4660-1SUSE-SU-2026:4706-1USN-8886-1

Timeline

  1. 22-08-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_try_adding_channels() takes a temporary reference to an interface before dropping iface_lock. If cifs_ses_add_channel() fails, it drops that reference and then increments iface->weight_fulfilled. A concurrent interface list refresh can remove the list reference while channel creation is in progress. In that case, the failure-path kref_put() releases the last reference and frees iface. Updating weight_fulfilled afterward then accesses freed memory. Increment weight_fulfilled before dropping the temporary reference, keeping iface alive for the final access.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.48%

Chance of exploitation in the next 30 days

Percentile

40%

Versus all other CVEs

30-day change

0.00 pp

From 0.48% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu144 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.9-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ cbc53148cc0946b72d62a3c53870cb22ce4ec284, < 64d7584e62ac8cdc750455c5fdc6008fc2de4f06 | ≥ cff97d683a083b862a8bb24309e0f4d2d928128a, < c292d4686f717c03e5022fc4ae7c782f39a94915 | ≥ 6aac002bcfd554aff6d3ebb55e1660d078d70ab0, < 47dfac48bce7198ad4f1a388fc8c9491f878ac3b | ≥ 6aac002bcfd554aff6d3ebb55e1660d078d70ab0, < 1ffacbadc14530e55b8d86f7b917524f6a0fb891 | ≥ 6aac002bcfd554aff6d3ebb55e1660d078d70ab0, < 1305eadc6a7d78a8d0a52eee29ddd2d9e8a27805 | ≥ 6aac002bcfd554aff6d3ebb55e1660d078d70ab0, < 4986410316b1ae0e63c6ce418e4eb196723626e7 | 22a6c5b3425f327e7f4c3606a72277dce82c7d83 | ≥ 6.1.78, < 6.1.183 | ≥ 6.6.17, < 6.6.152 | ≥ 6.7.5, < 6.8 | 6.8

3 vendors · 147 products

References

11 links
Show all 11 references