CVE-2026-74479

A flaw was found in the Linux kernel's pktgen module. This vulnerability, a use-after-free, occurs due to a race condition when handling proc entries, which are kernel interfaces. A local attacker could exploit this timing issue to trigger a system crash, leading to a Denial of Service (DoS).

pktgen has a race between NETDEV_CHANGENAME handling and kpktgend device removal where proc_remove can receive a stale proc_dir_entry pointer. The stale entry may already have been freed by the rename path, causing a slab use-after-free in proc_remove and a kernel crash. For the CVSS the PR:L is used in the paranoid score because reliable triggering may be possible for a local actor with delegated network administration or pktgen control rather than full host root in some deployments. The issue is not directly network reachable and is triggered through local pktgen and netdev control plane operations. Impact is at least local denial of service via kernel crash and in worst case may allow confidentiality or integrity impact due to kernel use-after-free, so it should be reviewed manually.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.