CVE-2026-74351

A flaw was found in the ocfs2 component of the Linux kernel. The locking_state debugfs iterator incorrectly handles pointers to lock resource blocks (LVB). When the original lock resource is freed while the iterator still holds a pointer to it, a use-after-free vulnerability occurs. This can lead to a system crash, resulting in a Denial of Service (DoS).

Red Hat has evaluated this issue as having a Moderate impact because exploitation is constrained to local users with debugging privileges and can only result in a system crash without compromising confidentiality or integrity. The vulnerable behavior occurs within the OCFS2 cluster filesystem, which is not supported or shipped in standard Red Hat Enterprise Linux configurations. Because the required filesystem components are absent from Red Hat enterprise kernels, default installations are not vulnerable to this race condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.