CVE-2026-74705
Published Aug 22, 2026
Last updated 2 days ago
AI description
CVE-2026-74705 describes a use-after-free vulnerability found in the Linux kernel, specifically within the UDP tunnel segmentation feature. The issue arises because the `__skb_udp_tunnel_segment()` function retrieves the UDP header before confirming that the tunnel header is correctly positioned in the `skb` head. If `skb->head` is reallocated during this process, the previously saved UDP header pointer becomes invalid. This can lead to a use-after-free condition, which has since been resolved in the Linux kernel.
- Description
- In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- NVD status
- Received
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
3
🚨*CVE* CVE-2026-74705 In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP… https://t.co/s7H8Aczx0s ----- Traducción: CVE-2026-74705 En … https://t.co/utmtNg
@infoflowcloud
23 Aug 2026
45 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2026-74705 In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP… https://t.co/L4ihoBHPu1
@CVEnew
23 Aug 2026
1295 Impressions
1 Retweet
3 Likes
0 Bookmarks
0 Replies
0 Quotes