CVE-2026-74548

HIGH 7.8

forcedeth: fix UAF of txrx_stats in nv_remove

CVSS Score

7.8

EPSS Score

0.1%

EPSS Percentile

3th

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().

Vendor	linux
Product	linux
Ecosystems	Linux Kernel
Industries	Technology
Published	Aug 15, 2026
Last Updated	Aug 19, 2026

Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Linux / Linux

f4b633b911fd3b4cbe1dc065e8fb064078d0889d < cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9 f4b633b911fd3b4cbe1dc065e8fb064078d0889d < 7c22b4ee0bd003cecfc14ca28981cb213e201f70 f4b633b911fd3b4cbe1dc065e8fb064078d0889d < d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc f4b633b911fd3b4cbe1dc065e8fb064078d0889d < cf2dcde2284562ff87830ca0b7fa2b06e95aef1e f4b633b911fd3b4cbe1dc065e8fb064078d0889d < c9d24a205fd508b9999fcab6aca4c590490a12cf f4b633b911fd3b4cbe1dc065e8fb064078d0889d < ae20a8a4de06a289d40b0a0633d8d573f1fcb049 f4b633b911fd3b4cbe1dc065e8fb064078d0889d < 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1 f4b633b911fd3b4cbe1dc065e8fb064078d0889d < 22666ba1420164753d7b0f5a841986b25ace5435

Linux / Linux

5.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗