CVE-2026-74602
Last modified
CVE-2026-74602 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order)..
Description
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() In rb_allocate_cpu_buffer(), bpage->order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGE_SIZE if when freed: free_buffer_page() relies on this value. Align the value with the actual allocation size (buffer::subbuf_order).
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 7c620d89bae1a926ab7d626600285d3516c9f3c4; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 2e37f2bf111429fbfa4d985b12df3ba496ca70aa; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 3b3e0a6ee5bb3ac000f135beef26b2b7ed1a771a; >= f9b94daa542a8d2532f0930f01cd9aec2d19621b, < 6d014e44b68ddd43f71288d2a4dbb1a259869149 |
| Linux | Linux | 6.8 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74602?
How severe is CVE-2026-74602?
How do I fix CVE-2026-74602?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-74597In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74598In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74599In the Linux kernel, the following vulnerability has been re…
- CVE-2026-7460mailcow-dockerized contains a stored cross-site scripting vu…7.4
- CVE-2026-74600In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74601In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74603In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74604In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74605In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74606In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74607In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74608In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-74602?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST