CVE-2026-74657: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-74657DEBIAN-CVE-2026-74657
Published 22-08-2026Last modified 27-08-2026
Open JSON

Vulnerability summary

CVE-2026-74657 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6 · Related 5
MGASA-2026-0506USN-8875-1USN-8875-2USN-8877-1USN-8878-1USN-8879-1

Timeline

  1. 22-08-2026
    PublishedVulnerability first disclosed.
  2. 27-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fib_nlmsg_size() still estimates nexthop space as if every gateway is encoded as an IPv4 RTA_GATEWAY attribute. IPv4 routes can also carry an IPv6 gateway, which fib_nexthop_info() dumps as RTA_VIA. As a result, route notifications can allocate an skb that is too small. fib_dump_info() then fails with -EMSGSIZE and rtmsg_fib() hits the WARN_ON() that marks such failures as a fib_nlmsg_size() bug. With panic_on_warn set, this becomes a kernel panic. Mirror the actual nexthop dump layout in fib_nlmsg_size(): account for IPv6 nexthop gateways dumped as RTA_VIA, for the no-header rtnexthop layout used inside RTA_MULTIPATH, and for RTA_FLOW only when it is actually present.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.9-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ d15662682db232da77136cd348f4c9df312ca6f9, < 57195f0ab5cfbb5ee0864e5aff15ceb48f5a5e28 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 0f0ca602941d0a81ae9514943ca06c55159c6385 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 5307a53599fa762c06e475ee4a375252074fd324 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 7f80ad373ce4a7af5367ff273cea0f16e91387f3 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 4a5dfbae5179f6574695012a980476254df2d295 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < a59edda6eda1252340354322d8ab318b2e9052fb | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 9b22f13524fa0de0d963bbd3002df6c28bae3395 | ≥ d15662682db232da77136cd348f4c9df312ca6f9, < 4ff9548d84945d2cbf9e4c207288063a200ea397 | 5.2

3 vendors · 168 products

References

17 links
Show all 17 references