CVE-2026-74450

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-74450

Key Details

CVE	CVE-2026-74450
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fix pptable use-after-free

amdgpu_dpm_get_pp_table() returns a pointer to a driver-owned power table

after dropping adev->pm.mutex. The sysfs path then copies from that pointer.

A concurrent pp_table write can replace and free the allocation during the

copy, causing a use-after-free.

Change the DPM interface to copy into caller-provided storage while the mutex

is held. Keep the size-only query for attribute discovery without exposing

the driver-owned pointer.

(cherry picked from commit f6eed7acfd30099ef7baeb6ba45bb59daad80631) (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74450
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74450

Source

Reference

NVD

CVE