CVE-2026-74455
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: validate uCAN receive record lengths pcan_usb_fd_decode_buf() walks uCAN records packed in one USB receive buffer. Require each record to contain the fixed header for its type, and verify CAN payload bytes before copying them into the skb.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux276d989cd2dd88e2b7ab2c96fd10c86836b12781, bf9d787b7e1ef59be19b35abca08194772deb97e, 89c92a8052698dbbd3652a77c04d02bbd74a3275, 6067c878e38d02a3d5c43497347e143f85c9064a, 2c8f08f3641a074da40acf05baa5a18ae2739260, 2427ef427bdd78d862c7c76597bfd9eda88b81f1, d9c115948c3dd5fcc2d0245cec5eb76c098503c8, 93fcab2c6968446316bbb49548848df604d6346f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 276d989cd2dd88e2b7ab2c96fd10c86836b12781, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < bf9d787b7e1ef59be19b35abca08194772deb97e, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 89c92a8052698dbbd3652a77c04d02bbd74a3275, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 6067c878e38d02a3d5c43497347e143f85c9064a, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 2c8f08f3641a074da40acf05baa5a18ae2739260, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 2427ef427bdd78d862c7c76597bfd9eda88b81f1, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < d9c115948c3dd5fcc2d0245cec5eb76c098503c8, 0a25e1f4f18566b750ebd3ae995af64e23111e63 ≤ v < 93fcab2c6968446316bbb49548848df604d6346f, 4.0 | 276d989cd2dd88e2b7ab2c96fd10c86836b12781, bf9d787b7e1ef59be19b35abca08194772deb97e, 89c92a8052698dbbd3652a77c04d02bbd74a3275, 6067c878e38d02a3d5c43497347e143f85c9064a, 2c8f08f3641a074da40acf05baa5a18ae2739260, 2427ef427bdd78d862c7c76597bfd9eda88b81f1, d9c115948c3dd5fcc2d0245cec5eb76c098503c8, 93fcab2c6968446316bbb49548848df604d6346f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.