Answer in brief
CVE-2026-74469 records a Unknown severity vulnerability in sctp: prevent peer transport count overflow. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8f840e47f190cbe61a96945c13e9551048d42cef <546221b86ceeba0d8fec92d46a0604bb7b62be07 || >=8f840e47f190cbe61a96945c13e9551048d42cef <09e722030e8148ba4ed1e42c6b2ea57bda9f9895 || >=8f840e47f190cbe61a96945c13e9551048d42cef <4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0 || >=8f840e47f190cbe61a96945c13e9551048d42cef <6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75 || >=8f840e47f190cbe61a96945c13e9551048d42cef <bd0e9289e2642f6a5c54faad304ce0f41e926d22 | 546221b86ceeba0d8fec92d46a0604bb7b62be07, 09e722030e8148ba4ed1e42c6b2ea57bda9f9895, 4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0, 6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75, bd0e9289e2642f6a5c54faad304ce0f41e926d22 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-74469 records a Unknown severity vulnerability in sctp: prevent peer transport count overflow. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8f840e47f190cbe61a96945c13e9551048d42cef <546221b86ceeba0d8fec92d46a0604bb7b62be07 || >=8f840e47f190cbe61a96945c13e9551048d42cef <09e722030e8148ba4ed1e42c6b2ea57bda9f9895 || >=8f840e47f190cbe61a96945c13e9551048d42cef <4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0 || >=8f840e47f190cbe61a96945c13e9551048d42cef <6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75 || >=8f840e47f190cbe61a96945c13e9551048d42cef <bd0e9289e2642f6a5c54faad304ce0f41e926d22 | 546221b86ceeba0d8fec92d46a0604bb7b62be07, 09e722030e8148ba4ed1e42c6b2ea57bda9f9895, 4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0, 6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75, bd0e9289e2642f6a5c54faad304ce0f41e926d22 |
| Linux/Linuxgeneric | 4.7 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit transport_count for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload, then copies one sockaddr_storage for every entry in transport_addr_list. After the wrap, a diagnostic dump reserves an empty payload and writes 8 MiB of peer addresses past the skb tail. Reject a new unique peer when transport_count has reached U16_MAX. Perform the check after the existing-peer lookup so a duplicate address continues to return its existing transport at the limit.
Quoted source text, attributed separately from HOL analysis.