CVE-2026-74693: net: prestera: validate firmware header length
In the Linux kernel, the following vulnerability has been resolved:
net: prestera: validate firmware header length
presterafwhdrparse() reads the firmware header before checking that the firmware image contains that header.
Reject images shorter than struct presterafwheader before decoding the magic and version fields.
Affected Software
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Systems using the Linux kernel Prestera network driver and processing a Prestera firmware image are exposed. The issue occurs when the image is shorter than the expected firmware header structure.
What does an attacker or triggering condition require?
The vulnerable parsing path must be given a malformed Prestera firmware image that is shorter than struct prestera_fw_header. The available information does not specify how such an image is supplied or whether this can be triggered remotely.
What should be done if patching cannot be applied immediately?
Do not load or process untrusted, malformed, or unexpectedly short Prestera firmware images. Ensure firmware images are obtained from trusted sources and validate their expected size before deployment.