Get real-time updates on Telegram
CVE-2026-74378: Linux 4.8
CVE-2026-74378. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00143 (percentile 0.0317), scored 15-Oct-2026.
Affected technology
Linux · 8700e3e7c4857d28ebaa824509934556da0b3e76 to before c8db0e5ab0b6c540214c46c56aaac7cbcb0967fe, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before e48daa94ad2d406225b73491fc935064716f0ec7, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 3cfa2a3adc51b7c57729961a03446962ff10e3d2, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before cd19a6345e3727adafafa5954b58b13c92e13b80, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 3e07ea9579dc9553d2285c26c2823931358aa3b8, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 02558c86b6b761063e9399e6b939984500327ef1, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before b9800d7953d119bcc068c74587d48e4ba0313629, 8700e3e7c4857d28ebaa824509934556da0b3e76 to before 22b8fbded65b8c441b634a185f8da67657df6c50
Linux
Linux · 4.8
Linux
Component: Not specified by the source
File: drivers/infiniband/sw/rxe/rxe_resp.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00143 · percentile 0.0317 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74378.html