CVE-2026-74603
High
Description
In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlink_info_version_fixed_put() treats it as a C string and may read beyond the field. Format at most OCP_BOARD_ID_LEN bytes into the existing local buffer before reporting the ID. Use a precision limit because the snprintf() output size alone does not bound the source string scan.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Linux
PublishedAug 22, 2026
First seenAug 22, 2026
How to fix
Update
- Linux Linux72ef3ce80078199bfad32f98d055f44ba7cd0c3d, 3d965811be78473654e6e8cc8e4fb7b6b87aa6c1, f92558bbe78d6284fedd053900f82a70f0aa8707, 5fd91dd4a143479b0575fb1f202ec1c501e71fd5, f8d7e5751267637190eff887c971d5b468106213, 6b69f2ef10cdb018c0b127a7cab88e590bbddba4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < 72ef3ce80078199bfad32f98d055f44ba7cd0c3d, 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < 3d965811be78473654e6e8cc8e4fb7b6b87aa6c1, 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < f92558bbe78d6284fedd053900f82a70f0aa8707, 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < 5fd91dd4a143479b0575fb1f202ec1c501e71fd5, 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < f8d7e5751267637190eff887c971d5b468106213, 0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4 ≤ v < 6b69f2ef10cdb018c0b127a7cab88e590bbddba4, 5.18 | 72ef3ce80078199bfad32f98d055f44ba7cd0c3d, 3d965811be78473654e6e8cc8e4fb7b6b87aa6c1, f92558bbe78d6284fedd053900f82a70f0aa8707, 5fd91dd4a143479b0575fb1f202ec1c501e71fd5, f8d7e5751267637190eff887c971d5b468106213, 6b69f2ef10cdb018c0b127a7cab88e590bbddba4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.