CVE-2026-74346

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74346", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.886Z", "datePublished": "2026-08-15T05:58:34.606Z", "dateUpdated": "2026-11-06T17:05:44.518Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:17:38.929Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix OOB read during CQ MR registration\n\nSashiko pointed out an unrelated bug during a previous patch:\nhttps://sashiko.dev/#/patchset/20260512183852.614045-1-jmoroni%40google.com\n\nThis change fixes the bug by eliminating the cqmr->split field which\nwas not being set properly and instead just checks the CQ resize\nfeature flag directly.\n\nThe cqmr->split field essentially tracks whether IRDMA_FEATURE_CQ_RESIZE\nis set, but it was not being set until CQ creation time, which is _after_\nCQ memory registration (the only other place where it is referenced).\n\nAs a result, it would always be false during MR registration and would\ntherefore cause irdma_handle_q_mem to populate cqmr->shadow even for GEN_2\nHW and beyond:\n\n cqmr->shadow = (dma_addr_t)arr[req->cq_pages];\n\nThe issue is that for GEN_2 and beyond, req->cq_pages may be exactly equal\nto iwmr->page_cnt and therefore equal to the size of arr, which would cause\nan OOB read by one."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "versions": [{"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "a80b3b13786e9ab1c52b31a1f16c7d6708fa9220", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "3159c6fac43dc24b34d31971884d98a7a1bf4c4b", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "ad360a31092a870633ec255b96f50181628b4de0", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "d566002de555b18cc395012c5c1cb8682fc6d2a9", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "54cab78df0375196aaec4e3109191653d21751df", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "d5aa82da8f65562da996d184686db9d0ea718b91", "status": "affected", "versionType": "git"}, {"version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "4385ddd654d90245eeb83b3cb539670ab5c85ba4", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "versions": [{"version": "5.14", "status": "affected"}, {"version": "0", "lessThan": "5.14", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.212", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "5.15.212"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.14", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a80b3b13786e9ab1c52b31a1f16c7d6708fa9220"}, {"url": "https://git.kernel.org/stable/c/3159c6fac43dc24b34d31971884d98a7a1bf4c4b"}, {"url": "https://git.kernel.org/stable/c/ad360a31092a870633ec255b96f50181628b4de0"}, {"url": "https://git.kernel.org/stable/c/d566002de555b18cc395012c5c1cb8682fc6d2a9"}, {"url": "https://git.kernel.org/stable/c/54cab78df0375196aaec4e3109191653d21751df"}, {"url": "https://git.kernel.org/stable/c/d5aa82da8f65562da996d184686db9d0ea718b91"}, {"url": "https://git.kernel.org/stable/c/4385ddd654d90245eeb83b3cb539670ab5c85ba4"}], "title": "RDMA/irdma: Fix OOB read during CQ MR registration", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-74346", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:56:22.704059Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T17:05:44.518Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-74346", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:56:22.704059Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:56:23.678Z"}}], "cna": {"title": "RDMA/irdma: Fix OOB read during CQ MR registration", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "a80b3b13786e9ab1c52b31a1f16c7d6708fa9220", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "3159c6fac43dc24b34d31971884d98a7a1bf4c4b", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "ad360a31092a870633ec255b96f50181628b4de0", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "d566002de555b18cc395012c5c1cb8682fc6d2a9", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "54cab78df0375196aaec4e3109191653d21751df", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "d5aa82da8f65562da996d184686db9d0ea718b91", "versionType": "git"}, {"status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "lessThan": "4385ddd654d90245eeb83b3cb539670ab5c85ba4", "versionType": "git"}], "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"status": "unaffected", "version": "0", "lessThan": "5.14", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/a80b3b13786e9ab1c52b31a1f16c7d6708fa9220"}, {"url": "https://git.kernel.org/stable/c/3159c6fac43dc24b34d31971884d98a7a1bf4c4b"}, {"url": "https://git.kernel.org/stable/c/ad360a31092a870633ec255b96f50181628b4de0"}, {"url": "https://git.kernel.org/stable/c/d566002de555b18cc395012c5c1cb8682fc6d2a9"}, {"url": "https://git.kernel.org/stable/c/54cab78df0375196aaec4e3109191653d21751df"}, {"url": "https://git.kernel.org/stable/c/d5aa82da8f65562da996d184686db9d0ea718b91"}, {"url": "https://git.kernel.org/stable/c/4385ddd654d90245eeb83b3cb539670ab5c85ba4"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix OOB read during CQ MR registration\n\nSashiko pointed out an unrelated bug during a previous patch:\nhttps://sashiko.dev/#/patchset/20260512183852.614045-1-jmoroni%40google.com\n\nThis change fixes the bug by eliminating the cqmr->split field which\nwas not being set properly and instead just checks the CQ resize\nfeature flag directly.\n\nThe cqmr->split field essentially tracks whether IRDMA_FEATURE_CQ_RESIZE\nis set, but it was not being set until CQ creation time, which is _after_\nCQ memory registration (the only other place where it is referenced).\n\nAs a result, it would always be false during MR registration and would\ntherefore cause irdma_handle_q_mem to populate cqmr->shadow even for GEN_2\nHW and beyond:\n\n cqmr->shadow = (dma_addr_t)arr[req->cq_pages];\n\nThe issue is that for GEN_2 and beyond, req->cq_pages may be exactly equal\nto iwmr->page_cnt and therefore equal to the size of arr, which would cause\nan OOB read by one."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.212", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.178", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.145", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.97", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.40", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1.5", "versionStartIncluding": "5.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.2", "versionStartIncluding": "5.14"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:17:38.929Z"}}}, "cveMetadata": {"cveId": "CVE-2026-74346", "state": "PUBLISHED", "dateUpdated": "2026-11-06T17:05:44.518Z", "dateReserved": "2026-08-15T05:44:03.886Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-08-15T05:58:34.606Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a80b3b13786e9ab1c52b31a1f16c7d6708fa9220", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "3159c6fac43dc24b34d31971884d98a7a1bf4c4b", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "ad360a31092a870633ec255b96f50181628b4de0", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "d566002de555b18cc395012c5c1cb8682fc6d2a9", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "54cab78df0375196aaec4e3109191653d21751df", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "d5aa82da8f65562da996d184686db9d0ea718b91", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}, {"lessThan": "4385ddd654d90245eeb83b3cb539670ab5c85ba4", "status": "affected", "version": "b48c24c2d710cf34810c555dcef883a3d35a9c08", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/infiniband/hw/irdma/verbs.c", "drivers/infiniband/hw/irdma/verbs.h"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.14"}, {"lessThan": "5.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.212", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/irdma: Fix OOB read during CQ MR registration\n\nSashiko pointed out an unrelated bug during a previous patch:\nhttps://sashiko.dev/#/patchset/20260512183852.614045-1-jmoroni%40google.com\n\nThis change fixes the bug by eliminating the cqmr->split field which\nwas not being set properly and instead just checks the CQ resize\nfeature flag directly.\n\nThe cqmr->split field essentially tracks whether IRDMA_FEATURE_CQ_RESIZE\nis set, but it was not being set until CQ creation time, which is _after_\nCQ memory registration (the only other place where it is referenced).\n\nAs a result, it would always be false during MR registration and would\ntherefore cause irdma_handle_q_mem to populate cqmr->shadow even for GEN_2\nHW and beyond:\n\n cqmr->shadow = (dma_addr_t)arr[req->cq_pages];\n\nThe issue is that for GEN_2 and beyond, req->cq_pages may be exactly equal\nto iwmr->page_cnt and therefore equal to the size of arr, which would cause\nan OOB read by one."}], "id": "CVE-2026-74346", "lastModified": "2026-11-06T17:19:46.647", "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-74346", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:56:22.704059Z", "version": "2.0.3"}}]}, "published": "2026-08-15T06:22:35.720", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3159c6fac43dc24b34d31971884d98a7a1bf4c4b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4385ddd654d90245eeb83b3cb539670ab5c85ba4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/54cab78df0375196aaec4e3109191653d21751df"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a80b3b13786e9ab1c52b31a1f16c7d6708fa9220"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ad360a31092a870633ec255b96f50181628b4de0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d566002de555b18cc395012c5c1cb8682fc6d2a9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d5aa82da8f65562da996d184686db9d0ea718b91"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: RDMA/irdma: Fix OOB read during CQ MR registration", "id": "2516763", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516763"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nRDMA/irdma: Fix OOB read during CQ MR registration\nSashiko pointed out an unrelated bug during a previous patch:\nhttps://sashiko.dev/#/patchset/20260512183852.614045-1-jmoroni%40google.com\nThis change fixes the bug by eliminating the cqmr->split field which\nwas not being set properly and instead just checks the CQ resize\nfeature flag directly.\nThe cqmr->split field essentially tracks whether IRDMA_FEATURE_CQ_RESIZE\nis set, but it was not being set until CQ creation time, which is _after_\nCQ memory registration (the only other place where it is referenced).\nAs a result, it would always be false during MR registration and would\ntherefore cause irdma_handle_q_mem to populate cqmr->shadow even for GEN_2\nHW and beyond:\ncqmr->shadow = (dma_addr_t)arr[req->cq_pages];\nThe issue is that for GEN_2 and beyond, req->cq_pages may be exactly equal\nto iwmr->page_cnt and therefore equal to the size of arr, which would cause\nan OOB read by one.", "A flaw was found in the Linux kernel's RDMA (Remote Direct Memory Access) irdma component. During Completion Queue (CQ) Memory Region (MR) registration, an internal field was not correctly initialized. This could lead to an out-of-bounds read when handling queue memory, potentially allowing an attacker to access sensitive information or cause system instability."], "name": "CVE-2026-74346", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74346\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74346\nhttps://lore.kernel.org/linux-cve-announce/2026081558-CVE-2026-74346-872c@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,a80b3b13786e9ab1c52b31a1f16c7d6708fa9220)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,3159c6fac43dc24b34d31971884d98a7a1bf4c4b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,ad360a31092a870633ec255b96f50181628b4de0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,d566002de555b18cc395012c5c1cb8682fc6d2a9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,54cab78df0375196aaec4e3109191653d21751df)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,d5aa82da8f65562da996d184686db9d0ea718b91)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[b48c24c2d710cf34810c555dcef883a3d35a9c08,4385ddd654d90245eeb83b3cb539670ab5c85ba4)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.212,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.178,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.145,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.97,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T17:15:03.020425+00:00", "updated": "2026-08-22T03:30:16.793822+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}