PT-2026-82123

CVE-2026-74743

·

Published

2026-08-26

·

Updated

2026-10-16

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the macvlan module where devices inherit hard header len from the lower device during macvlan init() but fail to inherit needed headroom and needed tailroom, leaving them set to 0. When the underlying lower device requires extra space for headers or trailers—such as in macsec, ipsec, wireguard, tunnels, or veth with rx headroom—upper layers may fail to reserve sufficient space. This can lead to reallocation overhead, skb headroom underflows, or KASAN slab-use-after-free crashes (a condition where the system attempts to access memory after it has been freed) when dev hard header() or macvlan hard header() prepends header data or when lower devices append tailroom.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-97782
OESA-2026-4038
OPENSUSE-SU-2026:21910-1
SUSE-SU-2026:23881-1
SUSE-SU-2026:23887-1
SUSE-SU-2026:23897-1
SUSE-SU-2026:23902-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4279-1
SUSE-SU-2026:4282-1
SUSE-SU-2026:4284-1
SUSE-SU-2026:4639-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4660-1
SUSE-SU-2026:4665-1
SUSE-SU-2026:4667-1
SUSE-SU-2026:4706-1
USN-8886-1
Found an issue in the description? Have something to add? Feel free to write us 👾