Out-of-Bound Memory Access in Linux Kernel Network Stack

CVE-2026-74434

What is CVE-2026-74434?

A vulnerability in the Linux kernel's network stack involves the improper handling of out-of-band (OOB) messages in the rxrpc protocol. The issue arises when a peeked message is not properly managed between the recvmsg_oobq and pending_oobq queues. This oversight can lead to memory corruption and a use-after-free scenario when the socket is closed, potentially allowing an attacker to exploit the situation by manipulating message queues. To mitigate this, the unlinking of messages should be executed only when truly consumed, preventing dual access to the same message and ensuring better memory management.

References