CVE-2026-74359

A flaw was found in the Linux kernel's configfs component. This vulnerability occurs because a memory pointer is not properly cleared after a failure, leading to a 'use-after-free' condition. A local attacker could exploit this by interacting with the affected directory, which could cause memory corruption. This could result in a system crash (denial of service) or potentially allow the attacker to execute arbitrary code.

This vulnerability is rated as Important for Red Hat Enterprise Linux because an authenticated local user could leverage the resulting kernel memory corruption to trigger a denial of service or potentially achieve elevated privileges. Exploitation requires triggering an internal allocation failure during directory traversal on an active configfs mount followed by directory reading operations, presenting significant practical hurdles for reliable abuse. Because successful exploitation compromises kernel space without requiring administrative access, the overall risk is elevated above Moderate.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.