CVE-2026-74418

A flaw was found in the dma-fence subsystem of the Linux kernel. This vulnerability allows for a null pointer dereference in tracepoint functions, such as trace_dma_fence_signaled, trace_dma_fence_wait_end, and trace_dma_fence_destroy, after a fence operation has been signaled and its internal pointers reset. An attacker could potentially exploit this to cause a system crash, leading to a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires local access and is limited to causing a denial of service through a system crash, without enabling data alteration or unauthorized access. The issue stems from changes introduced in upstream kernel code that are not present in supported Red Hat Enterprise Linux kernels. Consequently, Red Hat Enterprise Linux products are not affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.