CVE-2026-74627

net: devmem: prevent net-iov / page mixing

State: Published
Severity: 7.8 High
Published: Aug 22, 2026
Updated: Aug 25, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: devmem: prevent net-iov / page mixing

We should either have net_iov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopy_fill_skb_from_devmem().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bd61848900bff597764238f3a8ec67c815cd316e to before e9bfe12b1d04c34c6fedcba21d9709b65c08aa33Affected bd61848900bff597764238f3a8ec67c815cd316e to before ed08011ae0be88f16cceae190535d6c790c83b0cAffected bd61848900bff597764238f3a8ec67c815cd316e to before 53a43508ee332d8bffe40590c3d189c92a551f9fAffected
LinuxLinux	6.16Affected before 6.16Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.Not affected 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.