CVE-2026-74548: forcedeth: fix UAF of txrx_stats in nv_remove
In the Linux kernel, the following vulnerability has been resolved:
forcedeth: fix UAF of txrxstats in nvremove
nvremove() frees the per-CPU txrxstats before unregisternetdev(). Until unregister completes, ndogetstats64, the NAPI/xmit data path, and nvclose()/drain may still access txrxstats, leading to a use-after-free.
Free the stats only after unregisternetdev().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74548?
CVE-2026-74548 has been assigned a risk score of 34, indicating a medium severity vulnerability.
How do I fix CVE-2026-74548?
To fix CVE-2026-74548, update your Linux kernel to the latest version where this vulnerability has been addressed.
What type of vulnerability is CVE-2026-74548?
CVE-2026-74548 is classified as a Use After Free vulnerability in the Linux kernel.
Which software is affected by CVE-2026-74548?
CVE-2026-74548 affects the Linux kernel, specifically relating to the forcedeth driver.
What impact does CVE-2026-74548 have on system security?
CVE-2026-74548 could potentially allow an attacker to execute arbitrary code due to unsafe access after memory has been freed.