CVE-2026-74621: Linux 6.8

Affected technology

Linux · 172ba7d46c202e679f3ccb10264c67416aaeb1c4 to before b5dbecc2016e1692fd1c2532af9c41ba729cb747, 0b5b831122fc3789fff75be433ba3e4dd7b779d4 to before 23e97d594ddd0153020c506d5041048fbde1beb4, 73f7da5fd124f2cda9161e2e46114915e6e82e97 to before 737873a59905a54ca0d2d127ef882f3f88bf4379, 3f14b377d01d8357eba032b4cabc8c1149b458b6 to before 47d99828591d0fe8be4b9c8992ff3b8e47968db9, 3f14b377d01d8357eba032b4cabc8c1149b458b6 to before b47bb899e04b5407c5a63fe88d4b6676586a6e84, 3f14b377d01d8357eba032b4cabc8c1149b458b6 to before 439d3e404f9d5e515911cc8132cde198b337c19e, 3f14b377d01d8357eba032b4cabc8c1149b458b6 to before 8a7ed561671aa6a911a2de99e59ef670a4d0b1df, f5346df0591d10bc948761ca854b1fae6d2ef441, 5.15.148 to before 5.15.217, 6.1.75 to before 6.1.184, 6.6.14 to before 6.6.152, 6.7.2 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
File: net/sched/act_ct.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.