Riskcovery

CVE-2026-74286

net: pfcp: allocate per-cpu tstats for PFCP netdevs

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: pfcp: allocate per-cpu tstats for PFCP netdevs

PFCP uses dev_get_tstats64() as its ndo_get_stats64 callback, but pfcp_link_setup() does not request NETDEV_PCPU_STAT_TSTATS. The net core therefore leaves dev->tstats NULL for PFCP devices.

Creating a PFCP rtnetlink device can immediately ask the new netdev for stats while building the RTM_NEWLINK notification. That reaches dev_get_tstats64() and dereferences the NULL dev->tstats pointer.

Set pcpu_stat_type to NETDEV_PCPU_STAT_TSTATS during PFCP link setup so the net core allocates the storage expected by dev_get_tstats64().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 76c8764ef36a5d37ea2e551bda28ac7f028383ba to before 56b4ad500fd1282ef04db3c4beae5b54ab093a53Affected
  • 76c8764ef36a5d37ea2e551bda28ac7f028383ba to before 51a1d9836acc76a1bd16170b2f4b35f11036593fAffected
  • 76c8764ef36a5d37ea2e551bda28ac7f028383ba to before 67e4b283de36d9eebf95acdea5d6674b6ef4b2f4Affected
  • 76c8764ef36a5d37ea2e551bda28ac7f028383ba to before 24041543da8cd84eb5d8ae738c534372fff54820Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.