Answer in brief
CVE-2026-74458 records a Unknown severity vulnerability in can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <695aea154bb2d453e6daada1510972fafd075285 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <3d0897ec623e422695d70d80ae456f89476c5328 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <185cb1fa38142a3cbf223dd8b3abb24217f330d3 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <21f0465fd86d77794aaed8e05f833634f68d178d || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee | 695aea154bb2d453e6daada1510972fafd075285, 3d0897ec623e422695d70d80ae456f89476c5328, 185cb1fa38142a3cbf223dd8b3abb24217f330d3, 21f0465fd86d77794aaed8e05f833634f68d178d, 0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee |
| Linux/Linuxgeneric | 3.8 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMD_HEADER_LEN can still be dispatched, and the wait path copies a matching command into a fixed caller-owned struct kvaser_cmd using the device-provided length. Reject nonzero commands that do not contain the fixed header or that extend beyond the current USB buffer item. In the wait path, also reject a matching command that exceeds the destination before copying it.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74458 records a Unknown severity vulnerability in can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <695aea154bb2d453e6daada1510972fafd075285 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <3d0897ec623e422695d70d80ae456f89476c5328 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <185cb1fa38142a3cbf223dd8b3abb24217f330d3 || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <21f0465fd86d77794aaed8e05f833634f68d178d || >=080f40a6fa28dab299da7a652e444b1e2d9231e7 <0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee | 695aea154bb2d453e6daada1510972fafd075285, 3d0897ec623e422695d70d80ae456f89476c5328, 185cb1fa38142a3cbf223dd8b3abb24217f330d3, 21f0465fd86d77794aaed8e05f833634f68d178d, 0293dd153f9dbc1ddf5dacdccc76b363bce4a8ee |
| Linux/Linuxgeneric | 3.8 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMD_HEADER_LEN can still be dispatched, and the wait path copies a matching command into a fixed caller-owned struct kvaser_cmd using the device-provided length. Reject nonzero commands that do not contain the fixed header or that extend beyond the current USB buffer item. In the wait path, also reject a matching command that exceeds the destination before copying it.
Quoted source text, attributed separately from HOL analysis.