PT-2026-79710

CVE-2026-74705

·

Published

2026-08-22

·

Updated

2026-11-03

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the tunnel segmentation process. The function skb udp tunnel segment() retrieves the UDP header before confirming the tunnel header is in the skb head. If the pull operation reallocates skb->head, the previously saved UDP header pointer becomes invalid, leading to a potential use-after-free condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
ALSA-2026:77690
ALSA-2026:83156
ALSA-2026:83157
ALSA-2026:83159
AZL-97182
CLSA-2026-1789037015
CLSA-2026-1789039259
CLSA-2026-1789039867
CLSA-2026-1789141176
CLSA-2026-1789898700
CLSA-2026-1789958474
CLSA-2026-1791132071
CLSA-2026-1791132078
CLSA-2026-1791800936
CLSA-2026-1791852988
CLSA-2026-1791858083
OESA-2026-3707
OESA-2026-3708
OPENSUSE-SU-2026:21910-1
RHSA-2026:79784
RHSA-2026:79786
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4282-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4706-1
USN-8875-1
USN-8875-2
USN-8877-1
USN-8878-1
USN-8879-1
USN-8886-1
USN-8959-1
USN-8960-1
USN-8963-1
Found an issue in the description? Have something to add? Feel free to write us 👾