Get real-time updates on Telegram
CVE-2026-74384: Linux 4.20
CVE-2026-74384. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00755 (percentile 0.54162), scored 15-Oct-2026.
Affected technology
Linux · f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 7e7b167e65610dfa7564d449474f4b477f9d4c1c, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 316b5f1168264844aa125959de1d6da2b1905795, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 1d4131b5c9823c7d2c86389898ad1b466af7df5e, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 9ffdd11bd6c961b46b3689850ff6c5d7af5c5fe5, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before bde4d6eb53f7d3cdae7e62c9ee84345fdd6e70a6, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 140d6fff4ed266592492a23444043842b4af7a62, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 7173a741fed73de6247384056fe92e582ba12507, f333444708f82c4a4d3ccac004da0bfd9cfdfa42 to before 001e57554de81aa79c25c18fd53911d8a415c304
Linux
Linux · 4.20
Linux
Component: Not specified by the source
File: drivers/nvme/host/core.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 39.4 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00755 · percentile 0.54162 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74384.html