In the Linux kernel, the following vulnerability has been resolved:

configfs: fix lockless traversals of ->s_children

Having the parent directory locked protects entries from removal
by another thread, but it does *not* protect cursors from being
moved around by lseek() - or freed, for that matter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
6f61076406251626be39651d114fac412b1e0c39 affected < 77fd6f50f633a52c2db061e7d71d8cb486b0265e
6f61076406251626be39651d114fac412b1e0c39 affected < 91f289728ec706b7ff1ca0ee845dd73ff2253488
6f61076406251626be39651d114fac412b1e0c39 affected < b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb
6f61076406251626be39651d114fac412b1e0c39 affected < 9e57e2863872e82e7c7237bc32299f67ebebc543
6f61076406251626be39651d114fac412b1e0c39 affected < 459860529c109c5ce08b81c0776ca1200eaaeb4a
6f61076406251626be39651d114fac412b1e0c39 affected < 637ef4961470e04455102b34ac484a34d8eca0a4
6f61076406251626be39651d114fac412b1e0c39 affected < e6d93108e0a27d7e6f95c7e45017d14ba2900d32
6f61076406251626be39651d114fac412b1e0c39 affected < 9b9e8bb81c41fd27e7b57a1c936fde140548535f
Linux Linux affected
Version Status Constraints
2.6.27 affected —
0 unaffected < 2.6.27
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/459860529c109c5ce08b81c0776ca1200eaaeb4a cve-icon cve-icon
https://git.kernel.org/stable/c/637ef4961470e04455102b34ac484a34d8eca0a4 cve-icon cve-icon
https://git.kernel.org/stable/c/77fd6f50f633a52c2db061e7d71d8cb486b0265e cve-icon cve-icon
https://git.kernel.org/stable/c/91f289728ec706b7ff1ca0ee845dd73ff2253488 cve-icon cve-icon
https://git.kernel.org/stable/c/9b9e8bb81c41fd27e7b57a1c936fde140548535f cve-icon cve-icon
https://git.kernel.org/stable/c/9e57e2863872e82e7c7237bc32299f67ebebc543 cve-icon cve-icon
https://git.kernel.org/stable/c/b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb cve-icon cve-icon
https://git.kernel.org/stable/c/e6d93108e0a27d7e6f95c7e45017d14ba2900d32 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_children Having the parent directory locked protects entries from removal by another thread, but it does *not* protect cursors from being moved around by lseek() - or freed, for that matter.
Title configfs: fix lockless traversals of ->s_children
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:23.722Z

Reserved: 2026-08-15T05:44:03.885Z

Link: CVE-2026-74330

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:33.773

Modified: 2026-08-15T06:22:33.773

Link: CVE-2026-74330

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.