CVE-2026-74259

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74259", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "REJECTED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.877Z", "datePublished": "2026-08-15T05:57:36.937Z", "dateUpdated": "2026-09-16T14:45:28.959Z", "dateRejected": "2026-09-16T14:45:28.959Z"}, "containers": {"cna": {"rejectedReasons": [{"lang": "en", "value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-16T14:45:28.959Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."}], "id": "CVE-2026-74259", "lastModified": "2026-10-16T15:10:00.103", "metrics": {}, "published": "2026-08-15T06:22:25.090", "references": [], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "kernel: cifs: remove all cifs files before kill super", "id": "2516885", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516885"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ncifs: remove all cifs files before kill super\nCifs files may be put into fileinfo_put_wq during umounting cifs.\nAfter umount done, cifsFileInfo_put_final is called, which cause\nfollowing BUG:\nBUG: kernel NULL pointer dereference, address: 0000000000000000\n...\n[ 134.222152] list_lru_add+0x64/0x1a0\n[ 134.222399] ? cifs_put_tcon+0x171/0x340 [cifs]\n[ 134.222772] d_lru_add+0x44/0x60\n[ 134.222997] dput+0x1fc/0x210\n[ 134.223213] cifsFileInfo_put_final+0x11a/0x140 [cifs]\n[ 134.223576] process_one_work+0x17c/0x320\n[ 134.223843] worker_thread+0x188/0x280\n[ 134.224084] ? __pfx_worker_thread+0x10/0x10\n[ 134.224366] kthread+0xcc/0x100\n[ 134.224576] ? __pfx_kthread+0x10/0x10\n[ 134.224827] ret_from_fork+0x30/0x50\n[ 134.225063] ? __pfx_kthread+0x10/0x10\n[ 134.225328] ret_from_fork_asm+0x1b/0x30\nThis can be reproduce by following:\nunshare -n bash -c \"\nmkdir -p ${CIFS_MNT}\nip netns attach root 1\nip link add eth0 type veth peer veth0 netns root\nip link set eth0 up\nip -n root link set veth0 up\nip addr add 192.168.0.2/24 dev eth0\nip -n root addr add 192.168.0.1/24 dev veth0\nip route add default via 192.168.0.1 dev eth0\nip netns exec root sysctl net.ipv4.ip_forward=1\nip netns exec root iptables -t nat -A POSTROUTING -s 192.168.0.2 -o\n${DEV} -j MASQUERADE\nmount -t cifs ${CIFS_PATH} ${CIFS_MNT} -o\nvers=3.0,sec=ntlmssp,credentials=${CIFS_CRED},rsize=65536,wsize=65536,cache=none,echo_interval=1\ntouch ${CIFS_MNT}/a.txt\nip netns exec root iptables -t nat -D POSTROUTING -s 192.168.0.2 -o\n${DEV} -j MASQUERADE\n\"\numount ${CIFS_MNT}", "A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. A local user could trigger a null pointer dereference by unmounting a CIFS share while certain files are still being processed. This could lead to a system crash, resulting in a denial of service."], "name": "CVE-2026-74259", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74259\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74259\nhttps://lore.kernel.org/linux-cve-announce/2026081542-CVE-2026-74259-6b8e@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[708c276f516d27beaded7f372ac8111cee43926c,55fb9581986141659002264fdc75cef307811eb8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0629a1a187e424373364d681b42b101894bdb548,4465ebe67d89345954bb3622b25dd13e06f9d367)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0e4b8faaaebe3137bec5723ef2b3cb0437fb38fd,3baedc9b2f53e6a6ac57b16fdff0f9b954d9ca71)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f655467a9973f964b267871e5fef533ad5014494,21303c4a2b7275e626c6b67de0f45f2d5b9bb3e7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[340cea84f691c5206561bb2e0147158fe02070be,7839f1817a0cb6c4ed5cfe25d04845c43380a129)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[340cea84f691c5206561bb2e0147158fe02070be,6d9a4aaaa8b2612b5ef9d581e2f286a458b71ee1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "30afc6ea72cc6cf7c8d579e79b64232801c38d08"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.167,6.1.178)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.130,6.6.145)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.78,6.12.97)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.18.20,6.18.40)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.19.10,6.20)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.178,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.145,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.97,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.40,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1.5,7.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T12:15:03.447688+00:00", "updated": "2026-08-17T09:45:06.229512+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-476"]}