Strix
57.7K

CVE-2026-74459

UnknownEPSS 0.17%

Last modified

CVE-2026-74459 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and will be handled by the normal RX path or by teardown. However, if usb_submit_urb() fails, the callback unanchors the URB and then returns directly. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and will be handled by the normal RX path or by teardown. However, if usb_submit_urb() fails, the callback unanchors the URB and then returns directly. This skips the existing free_urb path, so the coherent transfer buffer allocated with usb_alloc_coherent() is not released. Reuse the existing free_urb path after a resubmit failure so that the RX coherent buffer is freed before leaving the callback.

Metrics

EPSS Probability
0.17%

6.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7a0171b4921ad443fee5ed4fcb9d99fa4776edac, < c7ddf119544eea2d8409e12471c3f9f36ca02e3f; >= 2185ea6e4ebcb61d1224dc7d187c59723cb5ad59, < 21da1a374769751546cc131e58a4d8bd968f57b2; >= f6e90c113c92e83fc0963d5e60e16b0e8a268981, < 0ef136ba052101243ba117a1aca6f4a4c3a81142; >= b878444519fa03a3edd287d1963cf79ef78be2f1, < b85e5c310382803d27adf6fe6554d4208bc8951c; >= 18eee279e9b5bff0db1aca9475ae4bc12804f05c, < c311f17c261fd375ddf5755f2ebe1f022c19c5b0; >= 5eaad4f768266f1f17e01232ffe2ef009f8129b7, < 19c6c8c6cd5dd14fab5fcd744584812a57cbb78d; >= 5eaad4f768266f1f17e01232ffe2ef009f8129b7, < 7a0cf2b2497c757c3cb1286eddf2986abb0d387b; b8f9ca88253574638bcff38900a4c28d570b1919; >= 5.15.203, < 5.15.216; >= 6.1.167, < 6.1.183; >= 6.6.130, < 6.6.151; >= 6.12.77, < 6.12.103; >= 6.18.17, < 6.18.44; >= 6.19.7, < 6.20
LinuxLinux7.0

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74459?
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and will be handled by the normal RX path or by teardown. However, if usb_submit_urb() fails, the callback unanchors the URB and then returns directly. This skips the existing free_urb path, so the coherent transfer buffer allocated with usb_alloc_coherent() is not released. Reuse the existing free_urb path after a resubmit failure so that the RX coherent buffer is freed before leaving the callback.
How severe is CVE-2026-74459?
Severity scoring for CVE-2026-74459 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74459?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74459?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST