CVE-2026-74693: net: prestera: validate firmware header length

Published Aug 22, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

net: prestera: validate firmware header length

presterafwhdrparse() reads the firmware header before checking that the firmware image contains that header.

Reject images shorter than struct presterafwheader before decoding the magic and version fields.

Affected Software

1 affected component

Linux Linux kernel

Event History

Aug 22, 2026

CVE Published

via MITRE·03:32 PM

Data Sourced

via MITRE·03:32 PM

Description

Data Sourced

via NVD·04:16 PM

Description

Frequently Asked Questions

What systems are exposed to this issue?

Systems using the Linux kernel Prestera network driver and processing a Prestera firmware image are exposed. The issue occurs when the image is shorter than the expected firmware header structure.

What does an attacker or triggering condition require?

The vulnerable parsing path must be given a malformed Prestera firmware image that is shorter than struct prestera_fw_header. The available information does not specify how such an image is supplied or whether this can be triggered remotely.

What should be done if patching cannot be applied immediately?

Do not load or process untrusted, malformed, or unexpectedly short Prestera firmware images. Ensure firmware images are obtained from trusted sources and validate their expected size before deployment.

CVE-2026-74693: net: prestera: validate firmware header length

Affected Software

Event History

Frequently Asked Questions

What systems are exposed to this issue?

What does an attacker or triggering condition require?

What should be done if patching cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

What systems are exposed to this issue?

What does an attacker or triggering condition require?

What should be done if patching cannot be applied immediately?