Get real-time updates on Telegram
CVE-2026-74745: Linux 6.15
CVE-2026-74745. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00488 (percentile 0.40462), scored 14-Oct-2026.
Affected technology
Linux · c214410c47d6ec3128143370747d9e388bab21d7 to before d10e73572cda4af7487f82f58a7771f18cf61084, c214410c47d6ec3128143370747d9e388bab21d7 to before 8b1118fc5a5d2cdc21cc07b5106921ad4f77c544, c214410c47d6ec3128143370747d9e388bab21d7 to before 51e96fa31f7e7eac2cba8f854e24d36600cc040b
Linux
Linux · 6.15
Linux
Component: Not specified by the source
File: drivers/net/ethernet/broadcom/bnxt/bnxt.c, drivers/net/ethernet/broadcom/bnxt/bnxt.h
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Think it was racy previously since user may trigger an update as soon as notifier is installed. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.
- CCR priority
- 30.1 /100 (P4)
- CVSS 3.1
- 7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Source advisory
- EPSS
- 0.00488 · percentile 0.40462 · 2026-10-14
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-15 12:39:55.759815+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 11:57:11.427822+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-74745.html