CVE-2026-74433 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix UAF in rxgk_issue_challenge()

Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08
https://git.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8
https://git.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed.
Title		rxrpc: Fix UAF in rxgk_issue_challenge()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08 https://git.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8 https://git.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:59:32.823Z

Updated: 2026-08-15T05:59:32.823Z

Reserved: 2026-08-15T05:44:03.896Z

Link: CVE-2026-74433

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:45.417

Modified: 2026-08-15T06:22:45.417

Link: CVE-2026-74433

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74433", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.896Z", "datePublished": "2026-08-15T05:59:32.823Z", "dateUpdated": "2026-08-15T05:59:32.823Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:59:32.823Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix UAF in rxgk_issue_challenge()\n\nFix rxgk_issue_challenge() to free the page containing the challenge\ncontent after invoking the tracepoint as the whdr passed to the tracepoint\npoints into the page just freed."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rxrpc/rxgk.c"], "versions": [{"version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "lessThan": "844b8525ce503405c462ad67f750bec648720397", "status": "affected", "versionType": "git"}, {"version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "lessThan": "83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8", "status": "affected", "versionType": "git"}, {"version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "lessThan": "107a4cb0d47e735830f852d83970d5c81f8e1e08", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/rxrpc/rxgk.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397"}, {"url": "https://git.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8"}, {"url": "https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08"}], "title": "rxrpc: Fix UAF in rxgk_issue_challenge()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/rxrpc/rxgk.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "844b8525ce503405c462ad67f750bec648720397", "status": "affected", "version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "versionType": "git"}, {"lessThan": "83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8", "status": "affected", "version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "versionType": "git"}, {"lessThan": "107a4cb0d47e735830f852d83970d5c81f8e1e08", "status": "affected", "version": "9d1d2b59341f58126a69b51f9f5f8ccb9f12e54a", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/rxrpc/rxgk.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: Fix UAF in rxgk_issue_challenge()\n\nFix rxgk_issue_challenge() to free the page containing the challenge\ncontent after invoking the tracepoint as the whdr passed to the tracepoint\npoints into the page just freed."}], "id": "CVE-2026-74433", "lastModified": "2026-08-15T06:22:45.417", "metrics": {}, "published": "2026-08-15T06:22:45.417", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/107a4cb0d47e735830f852d83970d5c81f8e1e08"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/83bb0ed050e2ad9453d8ef50e4d6e624eac6eed8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/844b8525ce503405c462ad67f750bec648720397"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}