-

CVE-2026-74693

net: prestera: validate firmware header length

In the Linux kernel, the following vulnerability has been resolved:

net: prestera: validate firmware header length

prestera_fw_hdr_parse() reads the firmware header before checking
that the firmware image contains that header.

Reject images shorter than struct prestera_fw_header before decoding the
magic and version fields.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 0fbcceb9d19f2d1dcdf099aee590f2517cb718bb
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < e0f382e8084117f0b11ffb070fe1079e38c0d7f9
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 6fad06bb793d7089ae05b9fcf46e11be2dfe4850
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 470ac9cce7308e60cf2dceb448749cdd006e73de
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 363e048a9d0a6c245cbc348c8a220170afed046a
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 7fa8a12296d8d5aa4b1c3904f0b354d81124cf29
Status affected
Version 4c2703dfd7fabb0824b3bc345f9fa47e33248c14
Version < 8ae344eb540af3f457179b52bc6061416752485c
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.152
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.072
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0fbcceb9d19f2d1dcdf099aee590f2517cb718bb
https://git.kernel.org/stable/c/363e048a9d0a6c245cbc348c8a220170afed046a
https://git.kernel.org/stable/c/38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240
https://git.kernel.org/stable/c/470ac9cce7308e60cf2dceb448749cdd006e73de
https://git.kernel.org/stable/c/6fad06bb793d7089ae05b9fcf46e11be2dfe4850
https://git.kernel.org/stable/c/7fa8a12296d8d5aa4b1c3904f0b354d81124cf29
https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c
https://git.kernel.org/stable/c/e0f382e8084117f0b11ffb070fe1079e38c0d7f9