CVE-2026-74683

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where a user-supplied event type index passed to the 'EVIOCGMASK' and 'EVIOCSMASK' ioctls is used to index the static counts array in the evdev get mask cnt() function and the client evmasks array in the evdev get mask() function. Although the event type is architecturally bounded by EV CNT, speculative execution—a process where a computer system performs some tasks before it is certain they are needed—may mispredict bounds checks, leading to out-of-bounds loads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.