CVE-2026-74370EPSS p8.6%
CVE-2026-74370CVE-2026-74370
Description
In the Linux kernel, the following vulnerability has been resolved:
liveupdate: fix TOCTOU race in luo_session_retrieve()
Extend the scope of the rwsem_read lock in luo_session_retrieve() to
overlap with the acquisition of the session mutex. This prevents a
concurrent thread from releasing and freeing the session between the
lookup and the mutex lock.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.6% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-17 |