CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-74258: Linux 6.6

CVE-2026-74258 affects Kernel. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00168 (percentile 0.05644), scored 13-Oct-2026. Fixed version: ff6c5ee77dcc98381290d16af53f6262625870a6. Fixed version: 2c387db784293256d35fd3d438f577cc82bb823d. Fixed version: a9f1395028c2bbe18e57864cc355c11faff488cb. Fixed version: c6d51ad36490013ee9df94a372d3bf794bd304d1. Fixed version: 4d87a251d45b4a95eb4c0abcfab809c9f231258a. Fixed version: 6.6.158. Fixed version: 6.12.111. Fixed version: 6.18.53. Fixed version: 7.1.5.

Affected technology

Linux · 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before ff6c5ee77dcc98381290d16af53f6262625870a6, 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before 2c387db784293256d35fd3d438f577cc82bb823d, 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before a9f1395028c2bbe18e57864cc355c11faff488cb, 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before c6d51ad36490013ee9df94a372d3bf794bd304d1, 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before 4d87a251d45b4a95eb4c0abcfab809c9f231258a
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: kernel/trace/bpf_trace.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

Product
Kernel
CCR priority
31.2 /100 (P4)
CVSS 3.1
7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00168 · percentile 0.05644 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-74258.html