Get real-time updates on Telegram
CVE-2026-74580: Linux 4.11
CVE-2026-74580. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00176 (percentile 0.06564), scored 12-Oct-2026.
Affected technology
Linux · f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before 5224bd37e37d36076a550d99b2aebba33939fd95, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before 54617e9119be2eb728ecdd8d977b99c99d4c498a, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before 13fa6f32a56a386a82bd7451644c494beed034af, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before cf363a7a02ce132ef1f58084fdb13e1a3b7da7e7, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before 6fa3e9b1fe856259555a7e22f3f3082e7827fd9b, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before f1e21108e3ddfcce62f6cad4ebd7b5674543c9e6, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before b70ebe0bba254e093dd5fd4c0c170941ce83eb85, f889491380582b4ba2981cf0b0d7d6a40fb30ab7 to before de845981da67a6b049080c87e605130b0c30adc5
Linux
Linux · 4.11
Linux
Component: Not specified by the source
File: drivers/vhost/vhost.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00121 · percentile 0.01739 · 2026-10-13
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-14 05:19:44.455882+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74580.html