{"apiVersion":"1.0","identifier":"CVE-2026-74401","description":"In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered In a benchmark scenario triggering a lot of requests that triggers a lot of DLM messages on the network it can be that the mh->seq is not ordered according the oldest seq number. This ordering is required by dlm_receive_ack as -before(mh->seq, seq)- will stop to check for older sequence numbers that are ordered in the tail of -node->send_queue-. The side effects of not having it correct ordered regarding -before(mh->seq, seq)- are refcounting issues and use-after free. I only was able to reproduce this issue in a experimental DLM branch and a user space DLM benchmark that uses io_uring. After changing this I don-t experienced any refcounting with the sending buffer issues anymore.","publishedAt":"2026-08-15T06:22:42","lastModifiedAt":"2026-08-17T06:19:35","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74401","cvssScore":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00444,"riskScore":1.02,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74401","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74401","en":"https://www.redsauce.net/en/cves/CVE-2026-74401","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74401","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74401","de":"https://www.redsauce.net/de/cves/CVE-2026-74401","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74401","el":"https://www.redsauce.net/el/cves/CVE-2026-74401"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74401"}}