CVE-2026-74513

A flaw was found in the Linux kernel's dibs module. A race condition exists during the attach, detach, and unregister operations of dmb_node objects. This allows a concurrent operation to free a dmb_node while another operation attempts to access its reference count, leading to a use-after-free vulnerability. This could result in memory corruption and potentially lead to a denial of service or arbitrary code execution.

This vulnerability is rated as Moderate impact for Red Hat because successful exploitation requires local user access and precise race timing to trigger memory corruption, preventing remote abuse. The underlying issue involves unsynchronized reference counting when releasing shared buffer descriptors in the dibs subsystem, which can lead to a use-after-free condition. Supported Red Hat Enterprise Linux kernel releases do not include the affected dibs loopback implementation and are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.