CVE-2026-74548

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the forcedeth driver. The nv remove() function frees the per-CPU txrx stats before the unregister netdev() process is complete. During this interval, the ndo get stats64 function, the NAPI/xmit data path, and the nv close()/drain process may still attempt to access txrx stats, resulting in a use-after-free condition. Use-after-free is a scenario where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.