CVE-2026-74433

CVE-2026-74433

Critical · published August 15, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix UAF in rxgk_issue_challenge()

Fix rxgk_issue_challenge() to free the page containing the challenge

content after invoking the tracepoint as the whdr passed to the tracepoint

points into the page just freed.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.5th percentile
Published
2026-08-15T10:22Z
References (3)
https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:59Z
    rxrpc: Fix UAF in rxgk_issue_challenge()
    cvelistv5