Answer in brief
CVE-2026-74406 records a Unknown severity vulnerability in vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5602c48cf87562c2f95b831d690631935e834295 <9c58c729d32e7cea5772cc44929c6cd61e5a31cd || >=5602c48cf87562c2f95b831d690631935e834295 <f79c80f173fda9545b220c1f094b65fc06c252d0 || >=5602c48cf87562c2f95b831d690631935e834295 <08f40c0d23c67c3aa4224c3311e134999c721fb4 || >=5602c48cf87562c2f95b831d690631935e834295 <4a8cde6f7281ea2c4c290f9ad9923b3631defceb || >=5602c48cf87562c2f95b831d690631935e834295 <ef44dac2a37f86eeae6b88ed10a6d60b35387dfd || >=5602c48cf87562c2f95b831d690631935e834295 <30a45c0bffdd62350261e2f2689fdba426a33578 | 9c58c729d32e7cea5772cc44929c6cd61e5a31cd, f79c80f173fda9545b220c1f094b65fc06c252d0, 08f40c0d23c67c3aa4224c3311e134999c721fb4, 4a8cde6f7281ea2c4c290f9ad9923b3631defceb, ef44dac2a37f86eeae6b88ed10a6d60b35387dfd, 30a45c0bffdd62350261e2f2689fdba426a33578 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is NULL after skb_gro_remcsum_init().
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74406 records a Unknown severity vulnerability in vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5602c48cf87562c2f95b831d690631935e834295 <9c58c729d32e7cea5772cc44929c6cd61e5a31cd || >=5602c48cf87562c2f95b831d690631935e834295 <f79c80f173fda9545b220c1f094b65fc06c252d0 || >=5602c48cf87562c2f95b831d690631935e834295 <08f40c0d23c67c3aa4224c3311e134999c721fb4 || >=5602c48cf87562c2f95b831d690631935e834295 <4a8cde6f7281ea2c4c290f9ad9923b3631defceb || >=5602c48cf87562c2f95b831d690631935e834295 <ef44dac2a37f86eeae6b88ed10a6d60b35387dfd || >=5602c48cf87562c2f95b831d690631935e834295 <30a45c0bffdd62350261e2f2689fdba426a33578 | 9c58c729d32e7cea5772cc44929c6cd61e5a31cd, f79c80f173fda9545b220c1f094b65fc06c252d0, 08f40c0d23c67c3aa4224c3311e134999c721fb4, 4a8cde6f7281ea2c4c290f9ad9923b3631defceb, ef44dac2a37f86eeae6b88ed10a6d60b35387dfd, 30a45c0bffdd62350261e2f2689fdba426a33578 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). udp_tunnel_sock_release() could set sk->sk_user_data to NULL while vxlan_gro_prepare_receive() is running. Let's check if rcu_dereference_sk_user_data() is NULL after skb_gro_remcsum_init().
Quoted source text, attributed separately from HOL analysis.