CVE-2026-74258

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Guard __get_user acesss with access_ok for uprobe_multi data

As reported by sashiko [1] we need to use access_ok to check the user space data bounds before we use __get-user to get it.

[1] https://lore.kernel.org/bpf/20260610145235.CB1441F00893@smtp.kernel.org/

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 89ae89f53d201143560f1e9ed4bfa62eee34f88e, < ff6c5ee77dcc98381290d16af53f6262625870a6; >= 89ae89f53d201143560f1e9ed4bfa62eee34f88e, < 2c387db784293256d35fd3d438f577cc82bb823d; >= 89ae89f53d201143560f1e9ed4bfa62eee34f88e, < a9f1395028c2bbe18e57864cc355c11faff488cb; >= 89ae89f53d201143560f1e9ed4bfa62eee34f88e, < c6d51ad36490013ee9df94a372d3bf794bd304d1; >= 89ae89f53d201143560f1e9ed4bfa62eee34f88e, < 4d87a251d45b4a95eb4c0abcfab809c9f231258a
LinuxLinux6.6

References

Timeline

Published
Aug 15, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74268.1Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allCVE-2026-742607.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use CVE-2026-74261In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize snd_seq_fifo_resize() CVE-2026-742627.8In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket callbacks kcm_attach(CVE-2026-74263In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb_clone in control TX t7xx_port_ctrl_tx() cloCVE-2026-742647.8In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking races Blamed commit converted theCVE-2026-74265In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_QUEUE_ID mana_gd_createCVE-2026-74266In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peCVE-2026-742679.8In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peekCVE-2026-742689.8In the Linux kernel, the following vulnerability has been resolved: tcp: clear sock_ops cb flags before force-closing a child socket A chiCVE-2026-742699.8In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow The xdp.py test test_xdp_natCVE-2026-74277.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 th
CVE-2026-74258: High severity, CVSS 7.8 | Vulnix