Use After Free Vulnerability in Linux Kernel's RXRPC Component

CVE-2026-74433

What is CVE-2026-74433?

A Use After Free vulnerability has been identified in the RXRPC component of the Linux kernel, specifically within the rxgk_issue_challenge() function. This issue arises when the function does not properly manage memory allocation, leading to the potential for accessing freed memory. The vulnerability can be exploited by manipulating the challenge content while ensuring that the reference passed to the tracepoint points to a memory page that has already been freed. This oversight necessitates an immediate resolution to enhance the security posture of the kernel and prevent possible exploitation.

References