CVE-2026-74602

Not scored yetLast modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order).

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 7c620d89bae1a926ab7d626600285d3516c9f3c4; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 2e37f2bf111429fbfa4d985b12df3ba496ca70aa; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 3b3e0a6ee5bb3ac000f135beef26b2b7ed1a771a; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 6d014e44b68ddd43f71288d2a4dbb1a259869149
LinuxLinux6.8

References

Timeline

Published
Aug 22, 2026
Last modified
Oct 14, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-746037.1In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-bytCVE-2026-746048.4In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commCVE-2026-746057.8In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When CVE-2026-746067.8In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec() eventfs_remove_recCVE-2026-746078.8In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separateCVE-2026-746089.8In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_tryCVE-2026-746097.8In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_node_link_down() tipc_CVE-2026-74617.2Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on WindCVE-2026-746107.8In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy pCVE-2026-746119.8In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_CVE-2026-7461210.0In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposesCVE-2026-746137.8In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b9175
CVE-2026-74602: Unscored | Vulnix