CVE-2026-430747.8High

CVE-2026-43074: Linux vulnerability

Linux

Vendor fix available · Affected: Linux · Exploitation: public proof of concept (unverified)

ExploitationProof of concept public

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public1 public GitHub repository (unverified), listed by PoC-in-GitHub18 Jul
Not established: not seen

0.5%probability of exploitation in the next 30 days

42nd percentile

050100

Higher than 42% of scored CVEs

7.8HighCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in eventpoll.c will kfree the epi->ep eventpoll struct while it still being used by another concurrent thread. Defer the kfree() to an RCU callback to prevent UAF.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Use After Free · Memory Corruption
Vendor: Linux
Published: May 2026
Band: Unlikely (under 1%), May 2026

What changed

18 Jul
PoC-in-GitHub lists 1 public GitHub repository (unverified) PoC-in-GitHub

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 10 Aug.

10 Aug 15:11
Kernel Eventpoll Bug CVE-2026-43074 Grants Local Root Access
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.