Linux Kernel Vulnerability in Cache Manager Callback Handling

CVE-2026-74425

What is CVE-2026-74425?

A vulnerability in the Linux kernel affects the handling of CB.InitCallBackState3 requests within the cache manager callback path. When an incoming call does not have an associated server record via the rxrpc peer's app data, the request can be misprocessed. The fix ensures that the implementation checks for the server record's presence before proceeding, allowing unmatched callback requests to be properly ignored. This enhancement maintains consistency in callback handling and improves the reliability of the cache manager service.

References