CVE-2026-74648

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-74648

Key Details

CVE	CVE-2026-74648
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-14
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

staging: rtl8723bs: validate monitor transmit frame lengths

rtw_cfg80211_monitor_if_xmit_entry() removes the radiotap header and

then reads the 802.11 frame control field without checking that a base

802.11 header remains.

The data path also pulls the calculated 802.11, QoS and SNAP header

span before confirming that the skb contains it. A truncated frame can

therefore cause out-of-bounds reads or leave insufficient data for the

Ethernet address writes.

Reject frames that do not contain the base 802.11 header and data

frames that do not contain their complete calculated header span. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74648
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74648

Source

Reference

NVD

CVE