CVE-2026-74693

net: prestera: validate firmware header length

State: Published
Severity: Not scored
Published: Aug 22, 2026
Updated: Aug 22, 2026
Reserved: Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: prestera: validate firmware header length

prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header.

Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240Affected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 0fbcceb9d19f2d1dcdf099aee590f2517cb718bbAffected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before e0f382e8084117f0b11ffb070fe1079e38c0d7f9Affected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 6fad06bb793d7089ae05b9fcf46e11be2dfe4850Affected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 470ac9cce7308e60cf2dceb448749cdd006e73deAffected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 363e048a9d0a6c245cbc348c8a220170afed046aAffected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 7fa8a12296d8d5aa4b1c3904f0b354d81124cf29Affected 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 8ae344eb540af3f457179b52bc6061416752485cAffected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.152 through 6.6.Not affected 6.12.104 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240Affected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 0fbcceb9d19f2d1dcdf099aee590f2517cb718bbAffected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before e0f382e8084117f0b11ffb070fe1079e38c0d7f9Affected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 6fad06bb793d7089ae05b9fcf46e11be2dfe4850Affected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 470ac9cce7308e60cf2dceb448749cdd006e73deAffected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 363e048a9d0a6c245cbc348c8a220170afed046aAffected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 7fa8a12296d8d5aa4b1c3904f0b354d81124cf29Affected
4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to before 8ae344eb540af3f457179b52bc6061416752485cAffected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.152 through 6.6.*Not affected
6.12.104 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.