CVE-2026-74672 addresses a use-after-free vulnerability in the Linux kernel's mm/vmalloc subsystem caused by a race condition between ptdump page table walks and vmap page table freeing. The vulnerability stems from vmap promoting page tables to huge leaf entries and freeing lower page tables without holding locks against concurrent ptdump walks, which can observe freed memory. The patch series fixes this by acquiring the mmap read lock on init_mm during huge page table entry setting and freeing, ensuring ptdump's mmap write lock excludes concurrent freeing. The fix also carefully handles arm64 architecture to avoid deadlocks by conditionally disabling the new locking and partially reverting previous arm64-specific changes. Related fixes include acquiring init_mm mmap locks during x86 Change Page Attributes (CPA) operations to prevent similar UAFs and ensuring stable kernel mappings by locking both init_mm and the mm being walked during non-kernel mm walks. The patch series establishes strict patch ordering to maintain logical and dependency correctness.

The vulnerability could lead to use-after-free conditions in kernel memory management, potentially causing kernel crashes or undefined behavior. No known exploits in the wild have been reported. The issue affects kernel stability and security by risking access to freed memory during page table walks, which could be leveraged in certain attack scenarios to compromise kernel integrity.

A patch series resolving this vulnerability has been developed and merged into the Linux kernel. Users and administrators should apply the official kernel updates containing these fixes to remediate the issue. Since this is a kernel-level vulnerability, updating to a fixed kernel version is the recommended and effective mitigation. No alternative mitigations or workarounds are indicated in the advisory.