Get real-time updates on Telegram
CVE-2026-74497: Linux 3.8
CVE-2026-74497. CVSS 3.1 base score 8.4 (HIGH, Source advisory). EPSS 0.00142 (percentile 0.03097), scored 15-Oct-2026.
Affected technology
Linux · 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 2d39fea6d3c19a2f5811d123114d92e3d0115fd1, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 09cf3dbbb4256a43feb91d2f51f274510a9ada47, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before cfa8d3e0e8b812c4db4d5241f62b6bdbab2bd7be, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 56ac3e7c90f6b45969c3fd07a98fad760ffd6901, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before be97fea7451d758881b95af78e900dd0d58a382a, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 2db4535d6af79276a64449201c5be5feffb31c64, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 53f0aa37eb945f3c983f61d12fc35eb33debb8a9, 28acb12014fb0c3e1edfdab1b1e3e266cf651550 to before 8d7a30c50c2e58a6839634ed0acde14466d1dc61
Linux
Linux · 3.8
Linux
Component: Not specified by the source
File: sound/usb/endpoint.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.4/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 33.6 /100 (P4)
- CVSS 3.1
- 8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00142 · percentile 0.03097 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74497.html