-

CVE-2026-74705

udp: fix potential use-after-free in tunnel segmentation

In the Linux kernel, the following vulnerability has been resolved:

udp: fix potential use-after-free in tunnel segmentation

__skb_udp_tunnel_segment() gets the UDP header before ensuring the
tunnel header is in the skb head. If the pull reallocates skb->head,
the saved UDP header pointer is no longer valid.

Get the UDP header after the pull to avoid a potential use-after-free.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 6a733a38b983d8c2e222f13968209010cf44de87
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 19d89b13a43640b2da2f277ee462d919d988cb6f
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < b3df61bb745eb5201eac22679a2839d4ccbf3442
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 1ae134c012e10384cdac420b5cc6e0615cde0b55
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 5161e67c561c4f28a5d9335a6e859b02511de92b
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 64d322c288577793eedd352b96ef75234ed380fe
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < 588d4a6795d99d080f74ef0b5f391ea8c453ae5d
Status affected
Version dbef491ebe7f3a4fb1b9111878b86a426fd540b7
Version < d0f86fb36eb260abd10007b62c9dcc1028e03e61
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.6
Status affected
Version 0
Version < 4.6
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.152
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/19d89b13a43640b2da2f277ee462d919d988cb6f
https://git.kernel.org/stable/c/1ae134c012e10384cdac420b5cc6e0615cde0b55
https://git.kernel.org/stable/c/5161e67c561c4f28a5d9335a6e859b02511de92b
https://git.kernel.org/stable/c/588d4a6795d99d080f74ef0b5f391ea8c453ae5d
https://git.kernel.org/stable/c/64d322c288577793eedd352b96ef75234ed380fe
https://git.kernel.org/stable/c/6a733a38b983d8c2e222f13968209010cf44de87
https://git.kernel.org/stable/c/b3df61bb745eb5201eac22679a2839d4ccbf3442
https://git.kernel.org/stable/c/d0f86fb36eb260abd10007b62c9dcc1028e03e61