CVE-2026-74681
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction. This matches the buffer that actually holds the response data.
Affected versions
Linux kernel versions
6.18
and later are affected. Fixed in
6.18.45,
7.1.9,
7.2
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-74681?
CVE-2026-74681 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.18 onward and has been patched in 6.18.45, 7.1.9 and 7.2. CVE-2026-74681 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74681?
Yes. CVE-2026-74681 has been patched. Fixed versions include 6.18.45, 7.1.9 and 7.2. If you are running Linux kernel 6.18 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74681 actively exploited?
No. CVE-2026-74681 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.