THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-74474 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() for transmit path header pulls In vxlan_xmit(), arp_reduce(), and vxlan_mdb_entry_skb_get(), pskb_may_pull() was being called to verify the availability of network layer heade

[NVD] CVE-2026-74474 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() for transmit path header pulls In vxlan_xmit(), arp_reduce(), and vxlan_mdb_entry_skb_get(), pskb_may_pull() was being called to verify the availability of network layer heade

mednvdPublished 2026-08-15

CVE-2026-74474 CVSS: 9.8 CRITICAL Published: 2026-08-15T13:17:52.177

In the Linux kernel, the following vulnerability has been resolved:

vxlan: use pskb_network_may_pull() for transmit path header pulls

In vxlan_xmit(), arp_reduce(), and vxlan_mdb_entry_skb_get(), pskb_may_pull() was being called to verify the availability of network layer headers (ARP, IPv6/ND, IP/IPv6 MDB keys).

However, dur

Indicators of compromise

CVE-2026-74474cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-74474