CVE-2026-74460
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: validate CPC message lengths ems_usb_read_bulk_callback() walks CPC messages packed in one USB receive buffer. Check that each declared message fits in the URB payload. Also require the type-specific payload to cover the fields used by the CAN, state, error and overrun handlers.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux1c380a332e342b7d58c86c4f556cb0823b16a9b8, bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6, db5655287d78f00daf98888a520bb8da4d30126d, ce8125566b1d0b0f16449407e014addf451804ea, 0b9090717c7e2184e2c427bbcc752f295116ac1d, 0b23144c59c126beb4a7761a85a194ae0fe668a5, df3ac2a672a5284441f120d486acabdd6740fc2a, 02925f51377f2a42a6724f00549167499c9302e5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < 1c380a332e342b7d58c86c4f556cb0823b16a9b8, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < db5655287d78f00daf98888a520bb8da4d30126d, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < ce8125566b1d0b0f16449407e014addf451804ea, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < 0b9090717c7e2184e2c427bbcc752f295116ac1d, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < 0b23144c59c126beb4a7761a85a194ae0fe668a5, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < df3ac2a672a5284441f120d486acabdd6740fc2a, 702171adeed3607ee9603ec30ce081411e36ae42 ≤ v < 02925f51377f2a42a6724f00549167499c9302e5, 2.6.32 | 1c380a332e342b7d58c86c4f556cb0823b16a9b8, bb3cc8da8a2967c0f8e83d148fc6870b19fa32c6, db5655287d78f00daf98888a520bb8da4d30126d, ce8125566b1d0b0f16449407e014addf451804ea, 0b9090717c7e2184e2c427bbcc752f295116ac1d, 0b23144c59c126beb4a7761a85a194ae0fe668a5, df3ac2a672a5284441f120d486acabdd6740fc2a, 02925f51377f2a42a6724f00549167499c9302e5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.