CVE-2026-74614

A flaw was found in the Linux kernel's vsock/virtio component. During system suspend and resume operations, a worker process might incorrectly retain a pointer to a deleted virtual queue while observing a replacement queue's running state. This inconsistent state can lead to system instability or a denial of service.

A race in virtio vsock workers can leave TX, RX, or event work using a stale virtqueue pointer across device suspend and resume. The worker reads the virtqueue before taking the worker mutex and before checking the run flag, so a delayed worker can keep a pointer to a deleted queue while restore installs a replacement queue and sets the run state again. This can result in a use after free when the worker later calls virtqueue operations on the stale object, causing at least a kernel crash and denial of service. For the CVSS the PR:L is used for the paranoid score because a local user or local process in the guest may be able to generate vsock activity needed to exercise the worker path, while the suspend resume timing still makes exploitation race dependent. The issue is not directly reachable over a normal IP network and requires a virtio vsock virtualization context.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.