CVE-2026-74457: can: peak_usb: add bounds check for USB channel index
Vulnerability summary
CVE-2026-74457 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.2% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 10 · Related 7Timeline
- 15-08-2026PublishedVulnerability first disclosed.
- 19-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: add bounds check for USB channel index The channel control index ctrl_idx is derived from rx->len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usb_if->dev[] is only 2. Values 2-15 cause heap out-of-bounds read, eventually causing kernel panic in the IRQ context. Add bounds checking for ctrl_idx before the array access in both pcan_usb_pro_handle_canmsg() and pcan_usb_pro_handle_error().
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
Decrease -0.04 pp
From 0.22% on 06-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu169 products
- linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 7.0.0-42.42
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 7.0.0-1016.17
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.8-1
- linux-6.12< 6.12.107-1~deb12u1
Linux1 product
- linux≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 18b1a868a2cda66fb438007ba47ce5f2484db381 | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 0c9268457bd6e4058fe55b4db01b16661c2eacf5 | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 94fb6fe83ce152532b11b36730b30f3dc0c94217 | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 825c903ca3c98cd0cf0e3de8ab8f2604a5339b3f | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < f97b7e5e1cdaae15cd95b3a360028c7929664969 | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 1acab790b7cecd4e144d1d18bdfe549e282f6b0b | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 0149fdb50a30944827acf9600a2cc44de0325a7f | ≥ d8a199355f8f8a0797c00d98788d7282c9ea38bd, < 39132f166ca8ce00ae60d8a9068e06a60943cc4b | 3.4
3 vendors · 172 products
