packet: use consistent hard_header_len in non-ring send paths
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 40 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring send paths packet_snd() reads dev->hard_header_len multiple times while allocating and constructing an skb. Device reconfiguration can change this value concurrently, for example through bonding device type changes. For SOCK_RAW, packet_snd() can save a larger value in reserve and later allocate headroom using a smaller value. Moving skb->data back by reserve then places it before skb->head, and the following copy from userspace can attempt an out-of-bounds write. packet_sendmsg_spkt() has the same issue because it calculates its reservation and header offset from separate reads before dropping the RCU read lock to allocate the skb. Add LL_RESERVED_SPACE_EX() for callers that already saved a header length. Read hard_header_len once in packet_snd() and use it for allocation and construction. In packet_sendmsg_spkt(), preserve the allocation-time value through the device lookup retry. The separate SOCK_DGRAM consistency problem between hard_header_len and header_ops->create is not addressed here.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Linux | Linux | 4.4.133 to before 4.5; 4.9.103 to before 4.10; 4.14.44 to before 4.15; 4.16.12 to before 4.17 | 4.5, 4.10, 4.15, 4.17 | Patch available | CNA |
| Linux | Linux | 4.17 and later | 5.10.267, 5.15.218, 6.1.185, 6.6.152, 6.12.104, 6.18.45, 7.1.9, 7.2 | Patch available | CNA |
- Linux VendorLinux Affected 4.4.133 to before 4.5; 4.9.103 to before 4.10; 4.14.44 to before 4.15; 4.16.12 to before 4.17 Fixed in 4.5, 4.10, 4.15, 4.17 Patch available CNA
- Linux VendorLinux Affected 4.17 and later Fixed in 5.10.267, 5.15.218, 6.1.185, 6.6.152, 6.12.104, 6.18.45, 7.1.9, 7.2 Patch available CNA
Remediation
- Fix · CNA Linux (Linux) Fixed in 4.5, 4.10, 4.15, 4.17
- Fix · CNA Linux (Linux) Fixed in 5.10.267, 5.15.218, 6.1.185, 6.6.152, 6.12.104, 6.18.45, 7.1.9, 7.2
Red Hat 19 advisories
- RHSA-2026:93412 Released 2026-11-01 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) kernel-64k-debug-devel-5.14.0-687.64.1.el9_8, kernel-64k-debug-devel-matched-5.14.0-687.64.1.el9_8, kernel-64k-devel-5.14.0-687.64.1.el9_8 +12
- Red Hat Enterprise Linux BaseOS (v. 9) kernel-5.14.0-687.64.1.el9_8, kernel-64k-5.14.0-687.64.1.el9_8, kernel-64k-core-5.14.0-687.64.1.el9_8 +28
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) kernel-tools-libs-devel-5.14.0-687.64.1.el9_8, libperf-5.14.0-687.64.1.el9_8
- Red Hat Enterprise Linux Real Time (v. 9) kernel-rt-5.14.0-687.64.1.el9_8, kernel-rt-64k-5.14.0-687.64.1.el9_8, kernel-rt-64k-core-5.14.0-687.64.1.el9_8 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt-5.14.0-687.64.1.el9_8, kernel-rt-core-5.14.0-687.64.1.el9_8, kernel-rt-debug-5.14.0-687.64.1.el9_8 +9
- RHSA-2026:92629 Released 2026-10-29 · Red Hat rating Importantkpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, kpatch-patch-5_14_0-284_172_1, and kpatch-patch-5_14_0-284_188_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) kpatch-patch-5_14_0-284_134_1-1-18.el9_2, kpatch-patch-5_14_0-284_148_1-1-16.el9_2, kpatch-patch-5_14_0-284_158_1-1-14.el9_2 +2
- RHSA-2026:92062 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
- Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-553_109_1-1-14.el8_10, kpatch-patch-4_18_0-553_125_1-1-11.el8_10, kpatch-patch-4_18_0-553_158_1-1-3.el8_10 +2
Show 16 more Red Hat advisories
- RHSA-2026:92061 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update
- Red Hat Enterprise Linux BaseOS (v. 10) kpatch-patch-6_12_0-211_16_1-2-11.el10_2, kpatch-patch-6_12_0-211_49_1-2-3.el10_2
- RHSA-2026:92063 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_161_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) kpatch-patch-4_18_0-477_107_1-1-17.el8_8, kpatch-patch-4_18_0-477_120_1-1-16.el8_8, kpatch-patch-4_18_0-477_130_1-1-14.el8_8 +2
- RHSA-2026:91650 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-5_14_0-687_10_1 and kpatch-patch-5_14_0-687_42_1 security update
- Red Hat Enterprise Linux BaseOS (v. 9) kpatch-patch-5_14_0-687_10_1-1-11.el9_8, kpatch-patch-5_14_0-687_42_1-1-2.el9_8
- RHSA-2026:91638 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kpatch-patch-5_14_0-570_116_1-1-12.el9_6, kpatch-patch-5_14_0-570_135_1-1-3.el9_6, kpatch-patch-5_14_0-570_39_1-1-18.el9_6 +2
- RHSA-2026:91639 Released 2026-10-28 · Red Hat rating Importantkpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_146_1, and kpatch-patch-5_14_0-427_84_1 security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) kpatch-patch-5_14_0-427_100_1-1-17.el9_4, kpatch-patch-5_14_0-427_113_1-1-15.el9_4, kpatch-patch-5_14_0-427_126_1-1-12.el9_4 +2
- RHSA-2026:76738 Released 2026-10-08 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- 10Base-SMTV kernel-modules-internal-6.12.0-211.63.1.el10_2
- Red Hat Enterprise Linux AppStream (v. 10) kernel-64k-debug-devel-6.12.0-211.63.1.el10_2, kernel-64k-debug-devel-matched-6.12.0-211.63.1.el10_2, kernel-64k-devel-6.12.0-211.63.1.el10_2 +12
- Red Hat Enterprise Linux BaseOS (v. 10) kernel-6.12.0-211.63.1.el10_2, kernel-64k-6.12.0-211.63.1.el10_2, kernel-64k-core-6.12.0-211.63.1.el10_2 +29
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) kernel-tools-libs-devel-6.12.0-211.63.1.el10_2, libperf-6.12.0-211.63.1.el10_2
- Red Hat Enterprise Linux Hidden (v. 10) kernel-modules-internal-6.12.0-211.63.1.el10_2
- Red Hat Enterprise Linux Real Time (v. 10) kernel-rt-6.12.0-211.63.1.el10_2, kernel-rt-64k-6.12.0-211.63.1.el10_2, kernel-rt-64k-core-6.12.0-211.63.1.el10_2 +21
- Red Hat Enterprise Linux Real Time for NFV (v. 10) kernel-rt-6.12.0-211.63.1.el10_2, kernel-rt-core-6.12.0-211.63.1.el10_2, kernel-rt-debug-6.12.0-211.63.1.el10_2 +9
- RHSA-2026:77498 Released 2026-10-08 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-553.172.1.el8_10, kernel-4.18.0-553.172.1.el8_10, kernel-abi-stablelists-4.18.0-553.172.1.el8_10 +19
- Red Hat Enterprise Linux CRB (v. 8) kernel-tools-libs-devel-4.18.0-553.172.1.el8_10
- RHSA-2026:77500 Released 2026-10-07 · Red Hat rating Importantkernel-rt security update
- Red Hat Enterprise Linux NFV (v. 8) kernel-rt-4.18.0-553.172.1.rt7.513.el8_10, kernel-rt-core-4.18.0-553.172.1.rt7.513.el8_10, kernel-rt-debug-4.18.0-553.172.1.rt7.513.el8_10 +9
- Red Hat Enterprise Linux RT (v. 8) kernel-rt-4.18.0-553.172.1.rt7.513.el8_10, kernel-rt-core-4.18.0-553.172.1.rt7.513.el8_10, kernel-rt-debug-4.18.0-553.172.1.rt7.513.el8_10 +7
- RHSA-2026:67723 Released 2026-09-16 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) kernel-64k-debug-devel-5.14.0-284.191.1.el9_2, kernel-64k-debug-devel-matched-5.14.0-284.191.1.el9_2, kernel-64k-devel-5.14.0-284.191.1.el9_2 +10
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool-7.0.0-284.191.1.el9_2, kernel-5.14.0-284.191.1.el9_2, kernel-64k-5.14.0-284.191.1.el9_2 +29
- RHSA-2026:67721 Released 2026-09-16 · Red Hat rating Importantkernel-rt security, bug fix, and enhancement update
- Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt-5.14.0-284.191.1.rt14.476.el9_2, kernel-rt-core-5.14.0-284.191.1.rt14.476.el9_2, kernel-rt-debug-5.14.0-284.191.1.rt14.476.el9_2 +9
- Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt-5.14.0-284.191.1.rt14.476.el9_2, kernel-rt-core-5.14.0-284.191.1.rt14.476.el9_2, kernel-rt-debug-5.14.0-284.191.1.rt14.476.el9_2 +11
- RHSA-2026:65711 Released 2026-09-09 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) bpftool-4.18.0-372.213.1.el8_6, kernel-4.18.0-372.213.1.el8_6, kernel-abi-stablelists-4.18.0-372.213.1.el8_6 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) bpftool-4.18.0-372.213.1.el8_6, kernel-4.18.0-372.213.1.el8_6, kernel-abi-stablelists-4.18.0-372.213.1.el8_6 +14
- RHSA-2026:65710 Released 2026-09-09 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.206.1.el8_4, kernel-4.18.0-305.206.1.el8_4, kernel-abi-stablelists-4.18.0-305.206.1.el8_4 +14
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) bpftool-4.18.0-305.206.1.el8_4, kernel-4.18.0-305.206.1.el8_4, kernel-abi-stablelists-4.18.0-305.206.1.el8_4 +14
- RHSA-2026:63537 Released 2026-09-04 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) bpftool-4.18.0-477.165.1.el8_8, kernel-4.18.0-477.165.1.el8_8, kernel-abi-stablelists-4.18.0-477.165.1.el8_8 +14
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) bpftool-4.18.0-477.165.1.el8_8, kernel-4.18.0-477.165.1.el8_8, kernel-abi-stablelists-4.18.0-477.165.1.el8_8 +14
- RHSA-2026:62609 Released 2026-09-02 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.102.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.102.1.el10_0, kernel-64k-devel-6.12.0-55.102.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.102.1.el10_0, kernel-64k-6.12.0-55.102.1.el10_0, kernel-64k-core-6.12.0-55.102.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.102.1.el10_0, libperf-6.12.0-55.102.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.102.1.el10_0, kernel-rt-64k-6.12.0-55.102.1.el10_0, kernel-rt-64k-core-6.12.0-55.102.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.102.1.el10_0, kernel-rt-core-6.12.0-55.102.1.el10_0, kernel-rt-debug-6.12.0-55.102.1.el10_0 +11
- RHSA-2026:60486 Released 2026-08-27 · Red Hat rating Importantkernel security update
- Red Hat CodeReady Linux Builder EUS (v.9.6) kernel-tools-libs-devel-5.14.0-570.136.1.el9_6, libperf-5.14.0-570.136.1.el9_6
- Red Hat Enterprise Linux AppStream EUS (v.9.6) kernel-64k-debug-devel-5.14.0-570.136.1.el9_6, kernel-64k-debug-devel-matched-5.14.0-570.136.1.el9_6, kernel-64k-devel-5.14.0-570.136.1.el9_6 +12
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) kernel-5.14.0-570.136.1.el9_6, kernel-64k-5.14.0-570.136.1.el9_6, kernel-64k-core-5.14.0-570.136.1.el9_6 +28
- Red Hat Enterprise Linux Real Time EUS (v.9.6) kernel-rt-5.14.0-570.136.1.el9_6, kernel-rt-64k-5.14.0-570.136.1.el9_6, kernel-rt-64k-core-5.14.0-570.136.1.el9_6 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) kernel-rt-5.14.0-570.136.1.el9_6, kernel-rt-core-5.14.0-570.136.1.el9_6, kernel-rt-debug-5.14.0-570.136.1.el9_6 +11
- RHSA-2026:60484 Released 2026-08-27 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) kernel-64k-debug-devel-5.14.0-427.147.1.el9_4, kernel-64k-debug-devel-matched-5.14.0-427.147.1.el9_4, kernel-64k-devel-5.14.0-427.147.1.el9_4 +11
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) bpftool-7.3.0-427.147.1.el9_4, kernel-5.14.0-427.147.1.el9_4, kernel-64k-5.14.0-427.147.1.el9_4 +29
- Red Hat Enterprise Linux Real Time E4S (v.9.4) kernel-rt-5.14.0-427.147.1.el9_4, kernel-rt-core-5.14.0-427.147.1.el9_4, kernel-rt-debug-5.14.0-427.147.1.el9_4 +9
- Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) kernel-rt-5.14.0-427.147.1.el9_4, kernel-rt-core-5.14.0-427.147.1.el9_4, kernel-rt-debug-5.14.0-427.147.1.el9_4 +11
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 9 | Affected | No fix yet |
| 10Base-SMTV | Fixed | RHSA-2026:76738 |
| Red Hat CodeReady Linux Builder EUS (v.9.6) | Fixed | RHSA-2026:60486 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:76738 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:93412 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:67723 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:60484 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:62609 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:60486 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:76738, RHSA-2026:92061 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:77498, RHSA-2026:92062 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:91650, RHSA-2026:93412 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:65710 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:65711 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:63537, RHSA-2026:92063 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:67723, RHSA-2026:92629 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:60484, RHSA-2026:91639 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:62609 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:60486, RHSA-2026:91638 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:65710 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:65711 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:63537 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2026:77498 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | Fixed | RHSA-2026:76738 |
| Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) | Fixed | RHSA-2026:93412 |
| Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) | Fixed | RHSA-2026:62609 |
| Red Hat Enterprise Linux Hidden (v. 10) | Fixed | RHSA-2026:76738 |
| Red Hat Enterprise Linux NFV (v. 8) | Fixed | RHSA-2026:77500 |
| Red Hat Enterprise Linux RT (v. 8) | Fixed | RHSA-2026:77500 |
| Red Hat Enterprise Linux Real Time (v. 10) | Fixed | RHSA-2026:76738 |
| Red Hat Enterprise Linux Real Time (v. 9) | Fixed | RHSA-2026:93412 |
| Red Hat Enterprise Linux Real Time E4S (v.9.2) | Fixed | RHSA-2026:67721 |
| Red Hat Enterprise Linux Real Time E4S (v.9.4) | Fixed | RHSA-2026:60484 |
| Red Hat Enterprise Linux Real Time EUS (v. 10.0) | Fixed | RHSA-2026:62609 |
| Red Hat Enterprise Linux Real Time EUS (v.9.6) | Fixed | RHSA-2026:60486 |
| Red Hat Enterprise Linux Real Time for NFV (v. 10) | Fixed | RHSA-2026:76738 |
| Red Hat Enterprise Linux Real Time for NFV (v. 9) | Fixed | RHSA-2026:93412 |
| Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) | Fixed | RHSA-2026:67721 |
| Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4) | Fixed | RHSA-2026:60484 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) | Fixed | RHSA-2026:62609 |
| Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6) | Fixed | RHSA-2026:60486 |
Not affected: 3 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux for NVIDIA 26
Timeline
- 2026-10-02 Threatist record created from CVE-2026-74582
- 2026-10-03 Alias added: GHSA-6g47-hqw2-hv2r
- 2026-10-07 Fix available: RHSA-2026:77500 · Red Hat
- 2026-10-07 Fix available: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8) · Red Hat
- 2026-10-08 Fix available: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · Red Hat
- 2026-10-09 Fix available: RHSA-2026:77498 · Red Hat
- 2026-10-18 CISA SSVC decision points changed
- 2026-10-26 Fix available: RHSA-2026:76738 · Red Hat
- 2026-10-26 Fix available: 10Base-SMTV, Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10) +4 · Red Hat
- 2026-10-29 Fix available: Red Hat Enterprise Linux BaseOS (v. 9) · Red Hat
- 2026-10-29 Fix available: RHSA-2026:91639 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:91650 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:92063 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:92061 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92629 · Red Hat
- 2026-10-30 Affected versions changed · Red Hat
- 2026-10-30 Fix available: RHSA-2026:92062 · Red Hat
- 2026-10-30 Fix available: RHSA-2026:91638 · Red Hat
- 2026-11-02 Fix available: RHSA-2026:93412 · Red Hat
- 2026-11-02 Fix available: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9) +1 · Red Hat
References
Other 8
- https://git.kernel.org/stable/c/bcd4df60ac9481b1ceffdfe5ec38fe51dcaae812
- https://git.kernel.org/stable/c/78a47127e33c340bc6d38dcc4552a094b4f5cc77
- https://git.kernel.org/stable/c/142e287b3a25cfe909215177c23243e7fc5ae2b1
- https://git.kernel.org/stable/c/91f041451f967cd87ed722a8f43c0b767a64f1a0
- https://git.kernel.org/stable/c/9052756290962ffb9a661bcf319e92dedaaedfed
- https://git.kernel.org/stable/c/5bb10753d428aadfc356a2bfe9acea09c82a62ec
- https://git.kernel.org/stable/c/b06b6fce6d7deaf7238e09b48ce3b1125ff41acd
- https://git.kernel.org/stable/c/03390aa32e669cc4ecd7d34108e2e1afc13d689d
More Linux vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2021-02452 Incorrect authorization in Ubuntu linux kernel KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
Sources
- CVE-2026-74582 · CVE Program
- CVE-2026-74582 · NVD
- FIRST EPSS
- GHSA-6g47-hqw2-hv2r · GitHub Advisory Database · CC BY 4.0
- CVE-2026-74582 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences