Description
In the Linux kernel, the following vulnerability has been resolved:

liveupdate: fix TOCTOU race in luo_session_retrieve()

Extend the scope of the rwsem_read lock in luo_session_retrieve() to
overlap with the acquisition of the session mutex. This prevents a
concurrent thread from releasing and freeing the session between the
lookup and the mutex lock.
Published: 2026-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a TOCTOU race in the Linux kernel’s liveupdate component. The function luo_session_retrieve() fails to keep the rwsem_read lock while acquiring the session mutex, allowing another thread to release and free the session between the lookup and the lock acquisition. This race can result in the session object being accessed after it has been released, which could lead to undefined behavior. The weakness is a classic concurrency flaw.

Affected Systems

The affected product is the Linux kernel. All versions in which luo_session_retrieve() lacks the extended lock protection are impacted; the exact version range is not specified in the data. No vendor‑specific version list was provided.

Risk and Exploitability

The CVSS score is 5.5. The EPSS score is <1%, and the vulnerability is not listed in the CISA KEV catalog. Exploitability would likely require local or privileged access to create a concurrent environment that triggers the race condition, making it less likely to be attacked remotely. Given the CVSS score, prompt mitigation is recommended.

Generated by OpenCVE AI on August 22, 2026 at 01:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a kernel update that includes the commit d3ae9e7fddb4036f50003d7fa1ef52801fdb961b, which fixes the race condition by extending the rwsem_read lock to overlap with the session mutex acquisition.
  • Disable or limit liveupdate functionality until the kernel update is applied to reduce exposure to the race condition.
  • Enable kernel hardening options such as CONFIG_DEBUG_KERNEL or other stack protection mechanisms to detect unintended session use during development and testing.

Generated by OpenCVE AI on August 22, 2026 at 01:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 22 Aug 2026 00:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-409
CWE-415

Fri, 21 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-367
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Sat, 15 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-409
CWE-415

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luo_session_retrieve() Extend the scope of the rwsem_read lock in luo_session_retrieve() to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the session between the lookup and the mutex lock.
Title liveupdate: fix TOCTOU race in luo_session_retrieve()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:18:05.573Z

Reserved: 2026-08-15T05:44:03.888Z

Link: CVE-2026-74370

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:38.750

Modified: 2026-08-17T06:19:31.823

Link: CVE-2026-74370

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-74370 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T02:00:17Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition