CVE-2026-74467
HighIn the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN capable check to ensure unprivileged users cannot invoke them.
CVSS 3.1 score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected versions
Linux kernel versions
5.15
and later are affected. Fixed in
5.15.216,
6.1.183,
6.6.151,
6.12.103,
6.18.44,
7.1.8,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-74467?
CVE-2026-74467 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 5.15 onward and has been patched in 5.15.216, 6.1.183, 6.6.151 and others. CVE-2026-74467 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
What is the CVSS score for CVE-2026-74467?
CVE-2026-74467 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. -
Is there a patch available for CVE-2026-74467?
Yes. CVE-2026-74467 has been patched. Fixed versions include 5.15.216, 6.1.183, 6.6.151 and others. If you are running Linux kernel 5.15 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74467 actively exploited?
No. CVE-2026-74467 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.