CVE-2026-74674

A flaw was found in the Linux kernel's memory management (mm) subsystem. The zap_pte_range function incorrectly flushes the Translation Lookaside Buffer (TLB) at an invalid address during page table reclaim. This can cause the system to cache references to empty page tables, potentially leading to system instability and a denial of service (DoS) through crashes or unexpected behavior, particularly on AMD and certain Intel systems.

This vulnerability is rated as Moderate impact because exploitation requires local unprivileged access and depends on complex, race-dependent CPU caching behaviors to trigger stale translation entries during memory unmapping. While a successful exploit could lead to kernel instability or a denial of service, reproducible exploitation is difficult under standard enterprise execution environments. Furthermore, the flawed direct page table reclamation code is not present in supported Red Hat Enterprise Linux releases.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.