CVE-2026-74258

High

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data As reported by sashiko [1] we need to use access_ok to check the user space data bounds before we use __get-user to get it. [1] https://lore.kernel.org/bpf/[email protected]/

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxff6c5ee77dcc98381290d16af53f6262625870a6, 2c387db784293256d35fd3d438f577cc82bb823d, a9f1395028c2bbe18e57864cc355c11faff488cb, c6d51ad36490013ee9df94a372d3bf794bd304d1, 4d87a251d45b4a95eb4c0abcfab809c9f231258a or later

Affected products

ProductAffected versionsFixed in
Linux Linux89ae89f53d201143560f1e9ed4bfa62eee34f88e ≤ v < ff6c5ee77dcc98381290d16af53f6262625870a6, 89ae89f53d201143560f1e9ed4bfa62eee34f88e ≤ v < 2c387db784293256d35fd3d438f577cc82bb823d, 89ae89f53d201143560f1e9ed4bfa62eee34f88e ≤ v < a9f1395028c2bbe18e57864cc355c11faff488cb, 89ae89f53d201143560f1e9ed4bfa62eee34f88e ≤ v < c6d51ad36490013ee9df94a372d3bf794bd304d1, 89ae89f53d201143560f1e9ed4bfa62eee34f88e ≤ v < 4d87a251d45b4a95eb4c0abcfab809c9f231258a, 6.6ff6c5ee77dcc98381290d16af53f6262625870a6, 2c387db784293256d35fd3d438f577cc82bb823d, a9f1395028c2bbe18e57864cc355c11faff488cb, c6d51ad36490013ee9df94a372d3bf794bd304d1, 4d87a251d45b4a95eb4c0abcfab809c9f231258a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-74258 · Linux · Dark Radar