Use-After-Free Vulnerability in Linux Kernel Affecting s390/ism

CVE-2026-74690

What is CVE-2026-74690?

A use-after-free vulnerability exists in the Linux kernel's s390/ism component, where an interrupt handler can operate simultaneously with the ism_dev_exit() function, resulting in access to freed data structures. This situation arises if ongoing interrupt handlers are not correctly drained before the associated ism data structures are freed. The issue has been addressed to mitigate risks associated with improper management of interrupts and to enhance the overall stability and security of the kernel.

References