Buffer Overflow Vulnerability in Linux Kernel Affects Multiple Systems

CVE-2026-74399

What is CVE-2026-74399?

A buffer overflow vulnerability exists in the Linux kernel's handling of extended attribute reads, specifically in the evm_read_xattrs() function. When there are no configured extended attributes enabled, the read buffer may remain uninitialized. This issue allows the function to read beyond initialized memory, potentially leading to exploitation. Proper memory management practices, such as explicit buffer termination and controlled string formatting, are crucial to mitigate this risk.

References