Race Condition in Linux Kernel Affects Multiple Distributions

CVE-2026-74405

What is CVE-2026-74405?

A race condition exists in the Linux kernel during the addition and lookup process of operational performance points (OPP). This vulnerability allows a newly added OPP to be discovered before its reference counter is initialized, potentially leading to reference count corruption and premature memory deallocation. The issue arises when a concurrent process attempts to access the OPP during its initialization phase, jeopardizing the stability and security of the kernel. Mitigation has been implemented by ensuring that the reference and operational tables are initialized prior to exposing the OPP for external access.

References