Strix
57.6K

CVE-2026-74548

HIGHCVSS 7.8/10EPSS 0.13%

Last modified

CVE-2026-74548 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().. EPSS estimates a 0.13% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.13%

2.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < 7c22b4ee0bd003cecfc14ca28981cb213e201f70; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < cf2dcde2284562ff87830ca0b7fa2b06e95aef1e; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < c9d24a205fd508b9999fcab6aca4c590490a12cf; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < ae20a8a4de06a289d40b0a0633d8d573f1fcb049; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1; >= f4b633b911fd3b4cbe1dc065e8fb064078d0889d, < 22666ba1420164753d7b0f5a841986b25ace5435
LinuxLinux5.3

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74548?
In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().
How severe is CVE-2026-74548?
CVE-2026-74548 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.13% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74548?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74548?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST