Race Condition in Linux Kernel's Classifier API Affecting Multiple Filter Types

CVE-2026-74700

What is CVE-2026-74700?

A vulnerability in the Linux kernel's classifier API allows for a race condition that can lead to use-after-free scenarios. Specifically, due to an incorrect locking mechanism when destroying locked classifiers, an attacker could exploit a flaw where multiple threads access and modify filter types concurrently. This results in unexpected references and potentially destabilizes the kernel. To mitigate this risk, it's essential to ensure proper locking during classifier destruction, thereby preventing unauthorized memory access and ensuring system stability.

References