SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74467

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's s390/qeth subsystem, where certain private ioctl commands can be executed by unprivileged users due to insufficient access controls. This oversight could allow unauthorized users to manipulate network device settings, potentially leading to unauthorized access or disruption of network services. System administrators and organizations utilizing Linux on s390 architecture should prioritize addressing this issue to safeguard their network configurations.

CVE
CVE-2026-74467
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN capable check to ensure unprivileged users cannot invoke them.