CVE-2026-74705

Published Aug 22, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-74705 describes a use-after-free vulnerability found in the Linux kernel, specifically within the UDP tunnel segmentation feature. The issue arises because the `__skb_udp_tunnel_segment()` function retrieves the UDP header before confirming that the tunnel header is correctly positioned in the `skb` head. If `skb->head` is reallocated during this process, the previously saved UDP header pointer becomes invalid. This can lead to a use-after-free condition, which has since been resolved in the Linux kernel.

Description
In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.
Source
416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status
Received

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

3