CVE-2026-4737: Kernel Anon Vma Degree Uaf

Possible Use-After-Free condition due to ambiguous tracking of lifecycle counts. The 'degree' field is being checked to identify structure reuse, but since it conflates the count of child instances and active virtual memory areas, it may approve reuse on unintended states.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-4737-kernel-anon-vma-degree-uaf --engine opengrep

Description

Possible Use-After-Free condition due to ambiguous tracking of lifecycle counts. The 'degree' field is being checked to identify structure reuse, but since it conflates the count of child instances and active virtual memory areas, it may approve reuse on unintended states.