CVE-2026-74512

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> audit: fix potential use-after-free in audit_del_rule()<br /> <br /> `audit_del_rule()` destroys `e-&gt;rule.exe` via `audit_remove_mark_rule()`<br /> before unlinking the rule from RCU-visible filter lists and waiting for a<br /> grace period. Concurrent readers in `audit_filter()` and<br /> `audit_filter_rules()` still dereference `e-&gt;rule.exe`, while the fsnotify<br /> mark can be freed on an independent lifetime path. This creates a<br /> use-after-free window during rule deletion.<br /> <br /> Fix this by unlinking the rule from the RCU-visible lists and invoking<br /> `synchronize_rcu()` before calling `audit_remove_mark_rule()` (and other<br /> rule removal helpers). This ensures that all existing RCU readers have<br /> exited the critical section before any underlying resources are destroyed.