Get real-time updates on Telegram
CVE-2026-74713: Linux 5.7
CVE-2026-74713. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.0016 (percentile 0.04728), scored 13-Oct-2026.
Affected technology
Linux · 0bbe30668d89ec8a309f28ced6d092c90fb23e8c to before ae128dd19040ee06a4f8143c7ced4d18080d7a9a, 0bbe30668d89ec8a309f28ced6d092c90fb23e8c to before 1ed35ac7f3fe2b4396bdd29ac3a7f0ebc0829e94
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: drivers/vdpa/mlx5/core/mlx5_vdpa.h, drivers/vdpa/mlx5/core/mr.c, drivers/vdpa/mlx5/core/resources.c, drivers/vdpa/vdpa_sim/vdpa_sim.c, drivers/vdpa/vdpa_user/iova_domain.c, drivers/vhost/iotlb.c, drivers/vhost/vdpa.c, drivers/vhost/vhost.c
Attack conditions (Source advisory, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · Source advisory
- EPSS
- 0.0016 · percentile 0.04728 · 2026-10-13
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-14 15:56:36.793806+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74713.html