PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46274 Linux CVE debrief

A use-after-free vulnerability was discovered in the Linux kernel's io-wq subsystem. The io_wq_remove_pending function did not properly check if the predecessor work was hashed before updating the hash_tail array. This could lead to a dangling pointer being stored in the hash_tail array, allowing for remote code execution.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-23
Advisory published
2026-06-08
Advisory updated
2026-07-23

Who should care

Users of the Linux kernel, particularly those who use the io-wq subsystem, should be aware of this vulnerability and take steps to patch their systems.

Technical summary

The io_wq_remove_pending function in the Linux kernel did not properly check if the predecessor work was hashed before updating the hash_tail array. This could lead to a use-after-free error and potentially allow for remote code execution.

Defensive priority

HIGH

Recommended defensive actions

  • Apply the patch from the Linux kernel repository [ref-4](https://git.kernel.org/stable/c/252c5051dba9c709b6a72f2866f93e5e618b3f06)
  • Update to a version of the Linux kernel that includes the fix

Evidence notes

The CVE record [cve-org](https://www.cve.org/CVERecord?id=CVE-2026-46274) and NVD detail [nvd](https://nvd.nist.gov/vuln/detail/CVE-2026-46274) provide additional information about this vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-46274 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-46274

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-46274 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46274

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/252c5051dba9c709b6a72f2866f93e5e618b3f06

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/5a20ebf0c81b61f5ea3b1b529c100cad69b9f603

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d376c131af7c7739a87ff037ed2fdb67c2542c8a

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d6a2d7b04b5a093021a7a0e2e69e9d5237dfa8cc

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d6bda9df0c0a3080804181464d5c0f4d78a4e769

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.