High 7.8Published May 6, 2026

CVE-2026-43074eventpoll: defer struct eventpoll free to RCU grace period

Updated under an hour ago (Oct 26, 2026, 9:30 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-416
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f2451def095c1743adcfcb0cb5dadc86034e162a before 902120be4f44947df6311002addc7faf69bdbff1; from a1f93804449d13f97dabd4b996817de4bf1ed67a before a6d57084372161f86660bc4607784420e00efe2c; from 58c9b016e12855286370dfb704c08498edbc857a before a6566cd33f6f967a7651ebf2ce0dd31572e319cf; 58c9b016e12855286370dfb704c08498edbc857a builds before 5b1173b165421561db29f30afc7e97d940a398a9; 58c9b016e12855286370dfb704c08498edbc857a builds before 7e8083f5eeedab0f460063b9c2c14c9a4e71a427; from 58c9b016e12855286370dfb704c08498edbc857a before ae0bb9c1fb7c2594519aeeb096cf2c3b7837b322; from 58c9b016e12855286370dfb704c08498edbc857a before 07712db80857d5d09ae08f3df85a708ecfc3b61f	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	all versions	CISA ADP
linux linux_kernel linux:linux_kernel	from 6.4.1 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 6.4; 7.0; 7.0; 7.0; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/902120be4f44947df6311002addc7faf69bdbff1
https://git.kernel.org/stable/c/a6d57084372161f86660bc4607784420e00efe2c
https://git.kernel.org/stable/c/a6566cd33f6f967a7651ebf2ce0dd31572e319cf	patch
https://git.kernel.org/stable/c/5b1173b165421561db29f30afc7e97d940a398a9	patch
https://git.kernel.org/stable/c/7e8083f5eeedab0f460063b9c2c14c9a4e71a427	patch
https://git.kernel.org/stable/c/ae0bb9c1fb7c2594519aeeb096cf2c3b7837b322	patch
https://git.kernel.org/stable/c/07712db80857d5d09ae08f3df85a708ecfc3b61f	patch
https://cert-portal.siemens.com/productcert/html/ssa-784472.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.