Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43074

In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7040a1ea4910cfc5e0d2029e76469ed353b6ff86663f7bcb94614e800b169c6c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/eventpoll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"902120be4f44947df6311002addc7faf69bdbff1","status":"affected","version":"f2451def095c1743adcfcb0cb5dadc86034e162a","versionType":"git"},{"lessThan":"a6d57084372161f86660bc4607784420e00efe2c","status":"affected","version":"a1f93804449d13f97dabd4b996817de4bf1ed67a","versionType":"git"},{"lessThan":"a6566cd33f6f967a7651ebf2ce0dd31572e319cf","status":"affected","version":"58c9b016e12855286370dfb704c0849…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/eventpoll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanOrEqual":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/eventpoll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"902120be4f44947df6311002addc7faf69bdbff1","status":"affected","version":"f2451def095c1743adcfcb0cb5dadc86034e162a","versionType":"git"},{"lessThan":"a6d57084372161f86660bc4607784420e00efe2c","status":"affected","version":"a1f93804449d13f97dabd4b996817de4bf1ed67a","versionType":"git"},{"lessThan":"a6566cd33f6f967a7651ebf2ce0dd31572e319cf","status":"affected","version":"58c9b016e12855286370dfb704c0849…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/eventpoll.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.83","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.24","versionType":"semver"},{"lessThanOrEqual":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/07712db80857d5d09ae08f3df85a708ecfc3b61f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/5b1173b165421561db29f30afc7e97d940a398a9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/7e8083f5eeedab0f460063b9c2c14c9a4e71a427"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/902120be4f44947df6311002addc7faf69bdbff1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/a6566cd33f6f967a7651ebf2ce0dd31572e319cf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/a6d57084372161f86660bc4607784420e00efe2c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ae0bb9c1fb7c2594519aeeb096cf2c3b7837b322"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:cb3b1d90d6b1b0c42164416074cb366ae4d96be3907460f15590f6be93e3c218 · sha256:72702879fae900ec… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer