Get real-time updates on Telegram
CVE-2026-74470: Linux 5.16
CVE-2026-74470. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00129 (percentile 0.02259), scored 15-Oct-2026.
Affected technology
Linux · ebacb44cb2042b90951140eda806bedad23ef554 to before 7b615fc139e35c81077046df44725c532f7e2404, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before 5d3e1d006bbb543259f9e31824caadbfff6a5465, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before 49e5b25a0b74dbac595f122e5608fdce2918cc4e, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before 495058429ca55ab7fcc21977b63b92907ad68066, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before 2047ed09bf13453b7d6f9431b112ec07984dd69b, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before d6e6da6bc3b53231fac77ffab428da8173ee729c, 7db0e0c8190a086ef92ce5bb960836cde49540aa to before 93dde0bf2f39a0f9f57fd610aa3201ce5b753433, c4d2d7c935a4ad20e8e726ca10499cefe4537103, 5.15.8 to before 5.15.217, 5.10.85 to before 5.11
Linux
Linux · 5.16
Linux
Component: Not specified by the source
File: drivers/scsi/scsi_debug.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00129 · percentile 0.02259 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74470.html