Buffer Overflow Risk in Linux Kernel Networking Stack by Linux Foundation

CVE-2026-74582

What is CVE-2026-74582?

A vulnerability in the Linux kernel's packet handling introduces a risk of buffer overflow due to inconsistent handling of hard_header_len values during the sending of packets. As packet_snd() reads dev->hard_header_len multiple times while constructing skbs, concurrent device reconfigurations can alter this value, potentially leading to an out-of-bounds write when sending raw socket packets. This issue is notably present in both packet_snd() and packet_sendmsg_spkt() functions, highlighting a significant risk for systems relying on raw socket communications. Proper mitigation strategies need to be employed to ensure the integrity of packet handling in affected systems.

References