High severity7.8NVD Advisory· Published May 6, 2026· Updated Jun 17, 2026

CVE-2026-43074

Description

In the Linux kernel, the following vulnerability has been resolved:

eventpoll: defer struct eventpoll free to RCU grace period

In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

100

SUSE S.A./Linux Enterprise Debuginfoinferred
Linux/Kernel10 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.4.1,<6.6.136
- cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
- (no CPE)
osv-coords89 versions
pkg:linux/kernel pkg:rpm/almalinux/kernel pkg:rpm/almalinux/kernel-64k pkg:rpm/almalinux/kernel-64k-core pkg:rpm/almalinux/kernel-64k-debug pkg:rpm/almalinux/kernel-64k-debug-core pkg:rpm/almalinux/kernel-64k-debug-devel pkg:rpm/almalinux/kernel-64k-debug-devel-matched pkg:rpm/almalinux/kernel-64k-debug-modules pkg:rpm/almalinux/kernel-64k-debug-modules-core pkg:rpm/almalinux/kernel-64k-debug-modules-extra pkg:rpm/almalinux/kernel-64k-devel pkg:rpm/almalinux/kernel-64k-devel-matched pkg:rpm/almalinux/kernel-64k-modules pkg:rpm/almalinux/kernel-64k-modules-core pkg:rpm/almalinux/kernel-64k-modules-extra pkg:rpm/almalinux/kernel-abi-stablelists pkg:rpm/almalinux/kernel-core pkg:rpm/almalinux/kernel-cross-headers pkg:rpm/almalinux/kernel-debug pkg:rpm/almalinux/kernel-debug-core pkg:rpm/almalinux/kernel-debug-devel pkg:rpm/almalinux/kernel-debug-devel-matched pkg:rpm/almalinux/kernel-debug-modules pkg:rpm/almalinux/kernel-debug-modules-core pkg:rpm/almalinux/kernel-debug-modules-extra pkg:rpm/almalinux/kernel-debug-uki-virt pkg:rpm/almalinux/kernel-devel pkg:rpm/almalinux/kernel-devel-matched pkg:rpm/almalinux/kernel-doc pkg:rpm/almalinux/kernel-headers pkg:rpm/almalinux/kernel-modules pkg:rpm/almalinux/kernel-modules-core pkg:rpm/almalinux/kernel-modules-extra pkg:rpm/almalinux/kernel-modules-extra-matched pkg:rpm/almalinux/kernel-rt pkg:rpm/almalinux/kernel-rt-64k pkg:rpm/almalinux/kernel-rt-64k-core pkg:rpm/almalinux/kernel-rt-64k-debug pkg:rpm/almalinux/kernel-rt-64k-debug-core pkg:rpm/almalinux/kernel-rt-64k-debug-devel pkg:rpm/almalinux/kernel-rt-64k-debug-modules pkg:rpm/almalinux/kernel-rt-64k-debug-modules-core pkg:rpm/almalinux/kernel-rt-64k-debug-modules-extra pkg:rpm/almalinux/kernel-rt-64k-devel pkg:rpm/almalinux/kernel-rt-64k-modules pkg:rpm/almalinux/kernel-rt-64k-modules-core pkg:rpm/almalinux/kernel-rt-64k-modules-extra pkg:rpm/almalinux/kernel-rt-core pkg:rpm/almalinux/kernel-rt-debug pkg:rpm/almalinux/kernel-rt-debug-core pkg:rpm/almalinux/kernel-rt-debug-devel pkg:rpm/almalinux/kernel-rt-debug-modules pkg:rpm/almalinux/kernel-rt-debug-modules-core pkg:rpm/almalinux/kernel-rt-debug-modules-extra pkg:rpm/almalinux/kernel-rt-devel pkg:rpm/almalinux/kernel-rt-modules pkg:rpm/almalinux/kernel-rt-modules-core pkg:rpm/almalinux/kernel-rt-modules-extra pkg:rpm/almalinux/kernel-tools pkg:rpm/almalinux/kernel-tools-libs pkg:rpm/almalinux/kernel-tools-libs-devel pkg:rpm/almalinux/kernel-uki-virt pkg:rpm/almalinux/kernel-uki-virt-addons pkg:rpm/almalinux/kernel-zfcpdump pkg:rpm/almalinux/kernel-zfcpdump-core pkg:rpm/almalinux/kernel-zfcpdump-devel pkg:rpm/almalinux/kernel-zfcpdump-devel-matched pkg:rpm/almalinux/kernel-zfcpdump-modules pkg:rpm/almalinux/kernel-zfcpdump-modules-core pkg:rpm/almalinux/kernel-zfcpdump-modules-extra pkg:rpm/almalinux/libperf pkg:rpm/almalinux/perf pkg:rpm/almalinux/python3-perf pkg:rpm/almalinux/rtla pkg:rpm/almalinux/rv pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 6.4.0, < 6.6.136+ 88 more
- (no CPE)range: >= 6.4.0, < 6.6.136
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-211.31.1.el10_2
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1.160000.2.17
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1
- (no CPE)range: < 6.12.0-160000.36.1

Patches

Vulnerability mechanics

References

News mentions

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability
SecurityWeek · Jul 6, 2026
New “Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices
Cyber Security News · Jul 4, 2026
New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android
The Hacker News · Jul 3, 2026

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000