Linux Kernel Vulnerability in Devlink Network Namespace Management

CVE-2026-74718

What is CVE-2026-74718?

A vulnerability in the Linux kernel's devlink component exposes a reference leak in the network namespace reload process. Specifically, if the requested network namespace differs from the current one and the reload action isn't a driver reinitialization, the function may fail without adequately releasing the held reference. This oversight can lead to resource issues and may impact system stability. Proper error handling is essential to mitigate potential risks associated with this flaw.

References