Strix
58.1K

CVE-2026-74330

HIGHCVSS 7.8/10EPSS 0.18%

Last modified

CVE-2026-74330 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from removal by another thread, but it does *not* protect cursors from being moved around by lseek() - or freed, for that matter.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from removal by another thread, but it does *not* protect cursors from being moved around by lseek() - or freed, for that matter.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.18%

7.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 6f61076406251626be39651d114fac412b1e0c39, < 77fd6f50f633a52c2db061e7d71d8cb486b0265e; >= 6f61076406251626be39651d114fac412b1e0c39, < 91f289728ec706b7ff1ca0ee845dd73ff2253488; >= 6f61076406251626be39651d114fac412b1e0c39, < b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb; >= 6f61076406251626be39651d114fac412b1e0c39, < 9e57e2863872e82e7c7237bc32299f67ebebc543; >= 6f61076406251626be39651d114fac412b1e0c39, < 459860529c109c5ce08b81c0776ca1200eaaeb4a; >= 6f61076406251626be39651d114fac412b1e0c39, < 637ef4961470e04455102b34ac484a34d8eca0a4; >= 6f61076406251626be39651d114fac412b1e0c39, < e6d93108e0a27d7e6f95c7e45017d14ba2900d32; >= 6f61076406251626be39651d114fac412b1e0c39, < 9b9e8bb81c41fd27e7b57a1c936fde140548535f
LinuxLinux2.6.27

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74330?
In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from removal by another thread, but it does *not* protect cursors from being moved around by lseek() - or freed, for that matter.
How severe is CVE-2026-74330?
CVE-2026-74330 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74330?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74330?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST