Address Configuration Flaw in Linux Kernel by The Linux Foundation

CVE-2026-74398

What is CVE-2026-74398?

A flaw in the Linux kernel's address configuration process can lead to potential instability during the Duplicate Address Detection (DAD) process. The issue arises when the state transitions from DAD to POSTDAD while allowing a concurrent process to modify the state to DEAD. This can result in a general protection fault due to attempts to overwrite a poisoned list entry. The correct re-sequencing of locks and state checks is necessary to mitigate this flaw and ensure reliable address configuration.

References