CVE-2026-74457

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the peak usb component where the channel control index ctrl idx is derived from rx->len, which is sourced directly from a device USB payload. While a mask allows values from 0 to 15, the usb if->dev[] array size is only 2. Consequently, values between 2 and 15 lead to a heap out-of-bounds read, which can result in a kernel panic within the IRQ (Interrupt Request) context. This occurs during the execution of the pcan usb pro handle canmsg() and pcan usb pro handle error() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.