Get real-time updates on Telegram
CVE-2026-74509: Linux 5.17
CVE-2026-74509. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00249 (percentile 0.15072), scored 15-Oct-2026.
Affected technology
Linux · cba6b758711cab946c787f7c15be92cc749b8e1f to before 565971488191bf54a87a417abafab6ad0de72201, cba6b758711cab946c787f7c15be92cc749b8e1f to before c4cec575a6d6f7c36808a3a0017b0675968bb06b, cba6b758711cab946c787f7c15be92cc749b8e1f to before 95cdcd8c82a501931fd3ae9b3811b0b6da167e94, cba6b758711cab946c787f7c15be92cc749b8e1f to before eb1d8318764de7216e6dbba29a24d69f7ce51348, cba6b758711cab946c787f7c15be92cc749b8e1f to before b16ebdbebd2d37f4cdc590bc3e9db71fe90350a3, cba6b758711cab946c787f7c15be92cc749b8e1f to before cdc36db204ffd97b947d64374cf23a210dc74777, 42fe380baaaccbe635c34ca07b29d19b9ec2498d, 5.15.210 to before 5.16
Linux
Linux · 5.17
Linux
Component: Not specified by the source
File: net/bluetooth/hci_sync.c
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.3 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00249 · percentile 0.15072 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 20:20:42.059737+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74509.html