Double Unlock Vulnerability in the Linux Kernel

CVE-2026-74428

What is CVE-2026-74428?

A double unlock vulnerability has been identified in the rxrpc_recvmsg function of the Linux kernel, potentially leading to unexpected behavior when processing out-of-band (OOB) messages. This flaw was addressed to enhance the stability and security of the kernel, ensuring that the handling of message locks is correctly managed without the risk of multiple unlock calls. It underscores the importance of ongoing vigilance in maintaining the integrity of kernel operations to protect systems from potential exploitation.

References