AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74258

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the handling of user space data in the bpf subsystem, specifically related to the __get_user function, which lacks proper bounds checking. This oversight could potentially allow unauthorized access to user space memory, leading to data corruption or privilege escalation. Linux system administrators and developers utilizing the kernel should prioritize applying the relevant patches to mitigate this risk.

CVE
CVE-2026-74258
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko [1] we need to use access_ok to check the user space data bounds before we use __get-user to get it. [1] https://lore.kernel.org/bpf/20260610145235.CB1441F00893@smtp.kernel.org/