Unrated severityNVD Advisory· Published Aug 15, 2026
CVE-2026-74370
CVE-2026-74370
Description
In the Linux kernel, the following vulnerability has been resolved:
liveupdate: fix TOCTOU race in luo_session_retrieve()
Extend the scope of the rwsem_read lock in luo_session_retrieve() to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the session between the lookup and the mutex lock.
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.