CVE-2026-74548
High
Description
In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxcdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9, 7c22b4ee0bd003cecfc14ca28981cb213e201f70, d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc, cf2dcde2284562ff87830ca0b7fa2b06e95aef1e, c9d24a205fd508b9999fcab6aca4c590490a12cf, ae20a8a4de06a289d40b0a0633d8d573f1fcb049, 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1, 22666ba1420164753d7b0f5a841986b25ace5435 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < 7c22b4ee0bd003cecfc14ca28981cb213e201f70, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < cf2dcde2284562ff87830ca0b7fa2b06e95aef1e, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < c9d24a205fd508b9999fcab6aca4c590490a12cf, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < ae20a8a4de06a289d40b0a0633d8d573f1fcb049, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1, f4b633b911fd3b4cbe1dc065e8fb064078d0889d ≤ v < 22666ba1420164753d7b0f5a841986b25ace5435, 5.3 | cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9, 7c22b4ee0bd003cecfc14ca28981cb213e201f70, d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc, cf2dcde2284562ff87830ca0b7fa2b06e95aef1e, c9d24a205fd508b9999fcab6aca4c590490a12cf, ae20a8a4de06a289d40b0a0633d8d573f1fcb049, 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1, 22666ba1420164753d7b0f5a841986b25ace5435 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.