Firmware Header Length Vulnerability in Linux Kernel Affecting Prestera

CVE-2026-74693

What is CVE-2026-74693?

A vulnerability in the Linux kernel's Prestera firmware processing allows for improper validation of firmware header lengths. The prestera_fw_hdr_parse() function does not verify that the firmware image has sufficient length before attempting to read its header. This oversight could potentially lead to the decoding of invalid or incomplete firmware, which may compromise system integrity and security. To mitigate this risk, it is essential to ensure that firmware images are validated against the expected struct prestera_fw_header length before decoding.

References