CVE-2026-74481

A flaw was found in the Linux kernel's memory management, specifically within the page reporting mechanism. During system suspend or hibernation, the page reporting process could attempt to access memory that had already been freed by device drivers. This Use-After-Free vulnerability can lead to a General Protection Fault, causing a system crash and resulting in a denial of service.

This vulnerability is rated as Moderate impact because successful exploitation requires local privileges to trigger power management operations and results exclusively in a denial of service. In Red Hat Enterprise Linux deployments, virtual machines rarely perform system suspend or hibernation cycles, which limits exposure under typical server workloads. The issue only manifests during power transitions when deallocated virtqueue structures are accessed during memory reclamation, causing a kernel panic without impacting data integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.