CVE-2026-74622: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-74622DEBIAN-CVE-2026-74622
Published 22-08-2026Last modified 22-08-2026
Open JSON

Vulnerability summary

CVE-2026-74622 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 12
MGASA-2026-0506OPENSUSE-SU-2026:21910-1SUSE-SU-2026:23881-1SUSE-SU-2026:23887-1SUSE-SU-2026:23897-1SUSE-SU-2026:23902-1

Timeline

  1. 22-08-2026
    PublishedVulnerability first disclosed.

Description

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aq_ring_rx_deinit() only walks [sw_head, sw_tail), the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page (and its DMA mapping) in the ring for reuse, and refill is batched: aq_ring_rx_fill() returns early until AQ_CFG_RX_REFILL_THRES slots are free. Slots that were consumed but not yet reposted therefore sit in the complementary [sw_tail, sw_head) gap with a live page, and the deinit walk never visits them: up to a refill batch worth of pages and DMA mappings leak on every interface down. Walk the whole ring instead and release whatever is still there. Also bail out if the buffer ring is already gone: a partial aq_ptp_ring_alloc() failure frees the ring but leaves aq_nic set, so aq_ptp_ring_deinit() still gets here on the unwind path.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.9-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 1e58b0bab40dcbdfc04acaba6a221d40801c3770 | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 30c473ea097ef0c93b064281b3e295c97d17e28b | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 17c99dd86f169c7a3e73d6778e79ef5b1ed3ceac | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < ff451bc4290b79c04f1c5cfa928d448f9d47ecf5 | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 64e1346bc66b947eb80b848e4c8d9828ba50e0fe | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 782cc40b7ade4614a8aec0b948b8cf95c69f8d4b | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < 24d87dc28ddd3771dd0e88719209811809729439 | ≥ 46f4c29d9de6e4a9d4ed7de9a37dd42501d89f86, < e8e7471ef686b6c002218fee9671cc61992ae01a | 5.2

3 vendors · 168 products

References

18 links
Show all 18 references