In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler… (CVE-2026-74629)
A use-after-free and double free vulnerability was identified and resolved in the Linux kernel's net/dibs subsystem. The issue involves the dmb_clientid_arr being accessed by a device interrupt handler after the device deletion function dibs_dev_del() has been called, leading to use-after-free. Additionally, a double free occurs if dibs_dev_add() fails during device probing. The fix ensures that dmb_clientid_arr is freed only after the last reference is released in dibs_dev_release().
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's net/dibs component involves improper memory management of the dmb_clientid_arr array. Specifically, a dibs device interrupt handler may remain active after dibs_dev_del() is called and still access dmb_clientid_arr, causing a use-after-free condition. Furthermore, if dibs_dev_add() fails during dibs_lo_dev_probe(), dmb_clientid_arr is freed twice, resulting in a double free. The remediation moves the freeing of dmb_clientid_arr to dibs_dev_release(), ensuring it occurs only after the last reference is gone. This correction prevents both use-after-free and double free conditions in the affected code paths.
Potential Impact
The vulnerability could lead to memory corruption due to use-after-free and double free conditions in the Linux kernel's net/dibs subsystem. Such memory corruption may cause system instability or crashes. No information about active exploitation or further impact is provided.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability has been resolved in the Linux kernel source by correcting the freeing of dmb_clientid_arr to occur only after the last reference is released. Users should monitor official Linux kernel advisories for patches addressing CVE-2026-74629 and apply them when available.
In the Linux kernel, the following vulnerability has been resolved: net/dibs: Correct freeing of dmb_clientid_arr A dibs device interrupt handler… (CVE-2026-74629)
Description
A use-after-free and double free vulnerability was identified and resolved in the Linux kernel's net/dibs subsystem. The issue involves the dmb_clientid_arr being accessed by a device interrupt handler after the device deletion function dibs_dev_del() has been called, leading to use-after-free. Additionally, a double free occurs if dibs_dev_add() fails during device probing. The fix ensures that dmb_clientid_arr is freed only after the last reference is released in dibs_dev_release().
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's net/dibs component involves improper memory management of the dmb_clientid_arr array. Specifically, a dibs device interrupt handler may remain active after dibs_dev_del() is called and still access dmb_clientid_arr, causing a use-after-free condition. Furthermore, if dibs_dev_add() fails during dibs_lo_dev_probe(), dmb_clientid_arr is freed twice, resulting in a double free. The remediation moves the freeing of dmb_clientid_arr to dibs_dev_release(), ensuring it occurs only after the last reference is gone. This correction prevents both use-after-free and double free conditions in the affected code paths.
Potential Impact
The vulnerability could lead to memory corruption due to use-after-free and double free conditions in the Linux kernel's net/dibs subsystem. Such memory corruption may cause system instability or crashes. No information about active exploitation or further impact is provided.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability has been resolved in the Linux kernel source by correcting the freeing of dmb_clientid_arr to occur only after the last reference is released. Users should monitor official Linux kernel advisories for patches addressing CVE-2026-74629 and apply them when available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8jrf-fhpg-2ggp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-74629"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a8a27f2acd9273b499bc844
Added to database: 08/22/2026, 22:51:30 UTC
Last enriched: 08/22/2026, 23:39:59 UTC
Last updated: 08/23/2026, 00:12:13 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.