PT-2026-72694

CVE-2026-74258

·

Published

2026-08-15

·

Updated

2026-11-12

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the bpf component where user space data bounds are not verified before access. The system fails to use the access ok() function to validate bounds before calling the get user() function to retrieve uprobe multi data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-96552
OESA-2026-3704
OPENSUSE-SU-2026:22091-1
SUSE-SU-2026:24179-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24184-1
SUSE-SU-2026:24197-1
SUSE-SU-2026:24235-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4706-1
USN-8886-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-9003-1
USN-9021-1
USN-9022-1
USN-9023-1
USN-9024-1
USN-9025-1
USN-9026-1
USN-9039-1
USN-9040-1
USN-9043-1
USN-9066-1
Found an issue in the description? Have something to add? Feel free to write us 👾