PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-74730 Linux CVE debrief

A use-after-free vulnerability in the Linux kernel's NFS implementation can be triggered by a delayed FREE_STATEID operation. This issue has been resolved by pinning the 'struct nfs_server' object during the FREE_STATEID operation. The vulnerability affects Linux systems utilizing NFS, potentially leading to system instability, data loss, or exploitation attempts. Defenders should assess exposure and prioritize patching to prevent these risks. The fix involves ensuring the 'struct nfs_server' object remains pinned during the FREE_STATEID operation, thereby preventing use-after-free errors.

Vendor
Linux
Product
Unknown
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-22
Original CVE updated
2026-10-16
Advisory published
2026-08-22
Advisory updated
2026-10-16

Who should care

Defenders responsible for Linux systems utilizing NFS should assess exposure and prioritize patching. This includes Linux system administrators, security teams, and operators who manage systems that rely on NFS. These stakeholders should review system configurations, apply patches, and monitor system logs for potential exploitation attempts. The vulnerability's impact on system stability, data integrity, and security necessitates prompt attention and

Why it matters

Defenders should prioritize patching this vulnerability to prevent potential system instability, data loss, and exploitation attempts. Linux system administrators and security teams should assess exposure and apply patches as soon as possible.

  • Potential system crashes or instability
  • Possible data corruption or loss
  • Increased risk of exploitation attempts
  • Need for verification of patch application

Technical summary

The Linux kernel's NFS implementation had a use-after-free vulnerability that could be triggered by a delayed FREE_STATEID operation. This was resolved by pinning the 'struct nfs_server' object during the FREE_STATEID operation. The vulnerability affects Linux systems using NFS, and defenders should prioritize verifying and applying patches. The technical fix involves modifying the NFS implementation to ensure the 'struct nfs_server' object is not prematurely cleaned up during the FREE_STATEID operation, thus preventing the use-after-free vulnerability.

Defensive priority

Defenders should prioritize verifying and applying patches for this vulnerability, particularly for systems utilizing NFS.

Recommended defensive actions

  • Verify and apply patches for this vulnerability
  • Review system configurations for NFS usage
  • Monitor system logs for potential exploitation attempts
  • Perform vulnerability scanning to identify exposed systems
  • Implement compensating controls for exposed systems
  • Track patch application and verify remediation
  • Review and update asset inventory for NFS usage

Evidence notes

The CVE record and source item provide details on the vulnerability and its resolution. However, there is limited information on potential exploitation or affected systems. Defenders should verify and apply patches for this vulnerability, particularly for systems utilizing NFS, and review system configurations for NFS usage. The lack of detailed information on exploitation attempts or affected systems requires defenders to take a cautious approach and prioritize patching based on the severity of the vulnerability and its potential for

Sources and references

Verified primary and authoritative sources

  • CVE-2026-74730 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-74730

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-74730 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-74730

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/74xxx/CVE-2026-74730.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/ed2f92ce2fc48463c41e0e540b9a3454889e8af8

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d858ab09e787106432d4d9830bad9dfedf02f890

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/af62f1af182d33a0de38308c012841885d8ab92e

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/caee6a68ffaa5016dfc01cd0b3dc1896a32e3abd

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/ed1161ab6239761958b38d5667225634fc2be894

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/d71dfffa512e71b166a889484e4c3b148a9a3af2

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/80ed3d762628b36c9e4b22fac7c65b72ef3b13dd

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.