Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-74512— audit: fix potential use-after-free in audit_del_rule()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 4.3版本存在安全漏洞，该漏洞源于audit_del_rule()函数在规则删除期间存在释放后重用问题，可能导致并发读者访问已释放的内存。

CVSS 7.8 · High EPSS 0.13% · P3

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 93616c567469510b7bba55b2674e0c4523fd7e64 affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 3f82927b399d7a276c0c12b6ff4424b747a0c9a7 affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 8ae135a8962be9d4e8a131eb18eb06cdf02a47ce affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 45bf3df5b32e5a49953e7ceabc55f7dd85380e46 affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 78bde7e9bd36eaae1b8e8cfcd47f12a34f301dbf affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< cae0dfed5d307b240bff71c3cf206652d1b6f215 affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 5b8f46864f06d6dbacb7dcea52bc084dfd122638 affected
34d99af52ad40bd498ba66970579a5bc1fb1a3bc< 246df90b5f1a8a6e6abbd2f058b029558720adec affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-74512

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
audit: fix potential use-after-free in audit_del_rule()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in audit_del_rule() `audit_del_rule()` destroys `e->rule.exe` via `audit_remove_mark_rule()` before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in `audit_filter()` and `audit_filter_rules()` still dereference `e->rule.exe`, while the fsnotify mark can be freed on an independent lifetime path. This creates a use-after-free window during rule deletion. Fix this by unlinking the rule from the RCU-visible lists and invoking `synchronize_rcu()` before calling `audit_remove_mark_rule()` (and other rule removal helpers). This ensures that all existing RCU readers have exited the critical section before any underlying resources are destroyed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 4.3版本存在安全漏洞，该漏洞源于audit_del_rule()函数在规则删除期间存在释放后重用问题，可能导致并发读者访问已释放的内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 34d99af52ad40bd498ba66970579a5bc1fb1a3bc ~ 93616c567469510b7bba55b2674e0c4523fd7e64 -
Linux Linux 4.3 -

II. Public POCs for CVE-2026-74512

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-74512

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-74512 (7)

Same Patch Batch · Linux · 2026-08-15 · 845 CVEs total

CVE-2026-74280 10.0 CRITICAL crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-74475 10.0 CRITICAL vxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-72407 10.0 CRITICAL geneve: validate inner network offset in geneve_gro_complete()
CVE-2026-74309 10.0 CRITICAL vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-72408 10.0 CRITICAL geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-72421 10.0 CRITICAL ipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-74279 10.0 CRITICAL crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-72493 9.9 CRITICAL net: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-72084 9.8 CRITICAL scsi: target: Bound PR-OUT TransportID parsing to the received buffer
CVE-2026-72249 9.8 CRITICAL netfilter: flowtable: use dst in this direction when pushing IPIP header
CVE-2026-72248 9.8 CRITICAL netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-72494 9.8 CRITICAL RDMA/irdma: Replace waitqueue and flag with completion
CVE-2026-72220 9.8 CRITICAL sunrpc: harden rq_procinfo lifecycle to prevent double-free
CVE-2026-74345 9.8 CRITICAL RDMA/siw: Fix endpoint/socket association handling
CVE-2026-74255 9.8 CRITICAL tipc: fix UAF in tipc_l2_send_msg()
CVE-2026-72221 9.8 CRITICAL sunrpc: wait for in-flight TLS handshake callback when cancel loses race
CVE-2026-72226 9.8 CRITICAL batman-adv: tt: prevent TVLV OOB check overflow
CVE-2026-74428 9.8 CRITICAL rxrpc: Fix double unlock in rxrpc_recvmsg()
CVE-2026-72083 9.8 CRITICAL scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
CVE-2026-72234 9.8 CRITICAL batman-adv: access unicast_ttvn skb->data only after skb realloc

Showing top 20 of 845 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-74512

No comments yet

Leave a comment