CVE-2026-74705

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74705
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74705.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-74705
Downstream
Published
2026-08-22T15:33:04Z
Modified
2026-08-26T03:49:41Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
udp: fix potential use-after-free in tunnel segmentation
Details

In the Linux kernel, the following vulnerability has been resolved:

udp: fix potential use-after-free in tunnel segmentation

__skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid.

Get the UDP header after the pull to avoid a potential use-after-free.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74705.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Fixed
6a733a38b983d8c2e222f13968209010cf44de87
Fixed
19d89b13a43640b2da2f277ee462d919d988cb6f
Fixed
b3df61bb745eb5201eac22679a2839d4ccbf3442
Fixed
1ae134c012e10384cdac420b5cc6e0615cde0b55
Fixed
5161e67c561c4f28a5d9335a6e859b02511de92b
Fixed
64d322c288577793eedd352b96ef75234ed380fe
Fixed
588d4a6795d99d080f74ef0b5f391ea8c453ae5d
Fixed
d0f86fb36eb260abd10007b62c9dcc1028e03e61

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74705.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.6.0
Fixed
5.10.265
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.216
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.183
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.152
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.104
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.45
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74705.json"