CVE-2026-74705
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Linux
PublishedAug 22, 2026
First seenAug 22, 2026
How to fix
Update
- Linux Linux6a733a38b983d8c2e222f13968209010cf44de87, 19d89b13a43640b2da2f277ee462d919d988cb6f, b3df61bb745eb5201eac22679a2839d4ccbf3442, 1ae134c012e10384cdac420b5cc6e0615cde0b55, 5161e67c561c4f28a5d9335a6e859b02511de92b, 64d322c288577793eedd352b96ef75234ed380fe, 588d4a6795d99d080f74ef0b5f391ea8c453ae5d, d0f86fb36eb260abd10007b62c9dcc1028e03e61 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 6a733a38b983d8c2e222f13968209010cf44de87, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 19d89b13a43640b2da2f277ee462d919d988cb6f, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < b3df61bb745eb5201eac22679a2839d4ccbf3442, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 1ae134c012e10384cdac420b5cc6e0615cde0b55, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 5161e67c561c4f28a5d9335a6e859b02511de92b, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 64d322c288577793eedd352b96ef75234ed380fe, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < 588d4a6795d99d080f74ef0b5f391ea8c453ae5d, dbef491ebe7f3a4fb1b9111878b86a426fd540b7 ≤ v < d0f86fb36eb260abd10007b62c9dcc1028e03e61, 4.6 | 6a733a38b983d8c2e222f13968209010cf44de87, 19d89b13a43640b2da2f277ee462d919d988cb6f, b3df61bb745eb5201eac22679a2839d4ccbf3442, 1ae134c012e10384cdac420b5cc6e0615cde0b55, 5161e67c561c4f28a5d9335a6e859b02511de92b, 64d322c288577793eedd352b96ef75234ed380fe, 588d4a6795d99d080f74ef0b5f391ea8c453ae5d, d0f86fb36eb260abd10007b62c9dcc1028e03e61 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.