CVE-2026-74601

A flaw was found in the Linux kernel's ring-buffer component. A race condition exists within the ring_buffer_swap_cpu() function, where a committing counter can temporarily drop to zero during a write operation. This allows a buffer swap to occur while a write is still in progress, resulting in an inconsistent buffer state. This inconsistency can lead to system instability and a denial of service.

This vulnerability is rated as Low severity because triggering the race window requires local system access and interaction with kernel tracing mechanisms that are typically restricted to administrative users. Under normal operating conditions, per-CPU trace buffer swapping is rarely invoked by unprivileged workloads. Consequently, exploitation is difficult to reliably achieve and the resulting impact is limited to local denial of service through system instability without exposing sensitive data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.