8.8

CVE-2026-74469: linux

CVSS: 8.8v3.1HighReceived
AliasesUBUNTU-CVE-2026-74469DEBIAN-CVE-2026-74469
Published 15-08-2026Last modified 16-10-2026
Open JSON

Vulnerability summary

CVE-2026-74469 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 1.47% chance of exploitation in the next 30 days, higher than 73.3% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
1.47%
0%100%
Low · +1.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 30 · Related 16
OPENSUSE-SU-2026:22091-1RHSA-2026:71213RHSA-2026:71232RHSA-2026:71233RHSA-2026:71565RHSA-2026:71569

Timeline

  1. 15-08-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

1.47%

Chance of exploitation in the next 30 days

Percentile

73%

Versus all other CVEs

30-day change

+1.00 pp

From 0.47% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu168 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.8-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < b453e00da1211e997b82743d28af7714c59c05c8 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < dfea32dd76f390e3155177b0038cc47b01386198 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < 80f48523a0fe42db2e7375dff4e38a25c117090a | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < 546221b86ceeba0d8fec92d46a0604bb7b62be07 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < 09e722030e8148ba4ed1e42c6b2ea57bda9f9895 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < 4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < 6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75 | ≥ 8f840e47f190cbe61a96945c13e9551048d42cef, < bd0e9289e2642f6a5c54faad304ce0f41e926d22 | 4.7

3 vendors · 171 products

References

20 links
Show all 20 references