CVE-2026-74428

CriticalCVSS 9.8

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

In the Linux kernel, the rxrpc subsystem fixed a double unlock in rxrpc_recvmsg() when handling OOB messages.

Risk Assessment

Double unlock can lead to incorrect synchronization, potentially causing system crashes or unpredictable behavior.

Recommendation

Apply the Linux kernel patch that fixes this issue.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with OOB messages.