CVE-2026-74681
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction. This matches the buffer that actually holds the response data.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 22, 2026
First seenAug 22, 2026
How to fix
Update
- Linux Linuxebfd1e82ab0a6d26efd9bdd89de899215851f5bf, 9ad0164f78b66b0b5eca3a5748cc94dd87e28124, 7e22c9f79b200672f3e477421b6c9050d8cf70a5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 121a0f839dbb397af5fabb701cea3e9983223e50 ≤ v < ebfd1e82ab0a6d26efd9bdd89de899215851f5bf, 121a0f839dbb397af5fabb701cea3e9983223e50 ≤ v < 9ad0164f78b66b0b5eca3a5748cc94dd87e28124, 121a0f839dbb397af5fabb701cea3e9983223e50 ≤ v < 7e22c9f79b200672f3e477421b6c9050d8cf70a5, 6.18 | ebfd1e82ab0a6d26efd9bdd89de899215851f5bf, 9ad0164f78b66b0b5eca3a5748cc94dd87e28124, 7e22c9f79b200672f3e477421b6c9050d8cf70a5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.