CVE-2026-74681
Last modified
CVE-2026-74681 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction. This matches the buffer that actually holds the response data.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 121a0f839dbb397af5fabb701cea3e9983223e50, < ebfd1e82ab0a6d26efd9bdd89de899215851f5bf; >= 121a0f839dbb397af5fabb701cea3e9983223e50, < 9ad0164f78b66b0b5eca3a5748cc94dd87e28124; >= 121a0f839dbb397af5fabb701cea3e9983223e50, < 7e22c9f79b200672f3e477421b6c9050d8cf70a5 |
| Linux | Linux | 6.18 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74681?
How severe is CVE-2026-74681?
How do I fix CVE-2026-74681?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-74676In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74677In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74678In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74679In the Linux kernel, the following vulnerability has been re…
- CVE-2026-7468A security vulnerability has been detected in 1024-lab smart…7.3
- CVE-2026-74680In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74682In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74683In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74684In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74685In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74686In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74687In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-74681?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
