> CVE-2026-74370

« BACK_TO_HOME
PUBLISHED
2026-08-15 06:22
MODIFIED
2026-08-15 06:22
EPSS (Prob. Exploit)
0.20%
Top 91.0%
DATA SOURCES:
NVD 🔗 2026-08-15 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-08-22

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo_session_retrieve() Extend the scope of the rwsem_read lock in luo_session_retrieve() to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the session between the lookup and the mutex lock.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

liveupdate: fix TOCTOU race in luo_session_retrieve()

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/08/2026 06:22
Source: NVD
Total des modifications: 0 Dernière mise à jour: 2 months ago

> REFERENCES

https://git.kernel.org/stable/c/d3ae9e7fddb4036f50003d7fa1ef52801fdb961b
https://git.kernel.org/stable/c/d944170607b872a1f93713c555ad3f0efde3a9b8
« BACK_TO_HOME