Slab-Out-Of-Bounds Read Vulnerability in Linux Kernel Networking

CVE-2026-74689

What is CVE-2026-74689?

A vulnerability in the Linux kernel's networking subsystem could allow for slab-out-of-bounds reads due to an ineffective length check in the vcc_setsockopt() function. If the option level does not match the expected value, the length check can be bypassed, potentially leading to memory access violations. This issue can occur if a caller sends mismatched parameters, or if certain filters manipulate the option length, resulting in unsafe memory operations. The vulnerability has now been addressed by changing the method used to validate input lengths and ensuring proper data type alignment.

References