Linux Kernel TCP stack Vulnerability Rated 8.2 CVSS

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-74704

Key Details

CVE	CVE-2026-74704
CVSS Score / Version	8.2 (High) / CVSS v3.1
Updated	2026-10-14
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products	Linux Kernel
Exploitation prediction (EPSS)	0.44% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

The sch_cake ACK filter parses packets to find the TCP header and filter

duplicated ACKs if the flow is backlogged. The parsing code contains a

WARN_ON(1) which can be triggered by a malformed IP header in certain

cases. Depending on the system configuration, this leads either to

either spamming dmesg with warnings, or a panic if panic_on_warn is set.

The code already correctly skips the offending packet in the branch that

triggers the warning, so the WARN_ON itself doesn't really serve any

purpose. So just drop it altogether to avoid the inconvenient side

effects. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74704
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74704

Source

Reference

NVD

CVE