CVE-2026-74334: Linux 4.18

CVE-2026-74334. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00129 (percentile 0.02258), scored 15-Oct-2026.

Affected technology

Linux · da5c8507821573b8ed6e3f47e009f273493ffaf7 to before 845c6b355226195dad1f26b300c4830f57034e8b, da5c8507821573b8ed6e3f47e009f273493ffaf7 to before 7a0cbb5721a1da81e902d73b6049f85ca8f3fc0a, da5c8507821573b8ed6e3f47e009f273493ffaf7 to before 05e26f34597e9c38bb5b340d86b179b23673869f, da5c8507821573b8ed6e3f47e009f273493ffaf7 to before a07cba1296aaa81bf9b914486ca957aaff196247, da5c8507821573b8ed6e3f47e009f273493ffaf7 to before 1a132ee4e655288d9a0937ea5109a0d038431ae9, da5c8507821573b8ed6e3f47e009f273493ffaf7 to before 50d5c02ab8e62325548bd3a6e6b758a9dcd6e7c3
Linux

Linux · 4.18
Linux

Component: Not specified by the source
File: drivers/infiniband/core/nldev.c, drivers/infiniband/core/restrack.c, drivers/infiniband/core/restrack.h, drivers/infiniband/core/uverbs_cmd.c, include/rdma/ib_verbs.h

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 16-Oct-2026 19:25 UTC

CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00129 · percentile 0.02258 · 2026-10-15
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-74334.html