CVE-2026-74677

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) issue exists in the ipheth USB network driver. The ipheth sndbulk callback() function re-arms the carrier work on any non-zero URB status. Because this action is not tied to the interface state, the work can be re-armed after ipheth close() has already drained it. This occurs during a device unplug while a TX URB is in flight or when the interface is brought down during a TX URB flight. Consequently, free netdev() frees the network device while carrier work is still pending, leading ipheth carrier check work() to dereference freed memory. A slab-use-after-free was observed in run timers() during testing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.