VYPR
Unrated severityNVD Advisory· Published Aug 15, 2026

CVE-2026-74370

CVE-2026-74370

Description

In the Linux kernel, the following vulnerability has been resolved:

liveupdate: fix TOCTOU race in luo_session_retrieve()

Extend the scope of the rwsem_read lock in luo_session_retrieve() to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the session between the lookup and the mutex lock.

Affected products

1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.