{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-74582",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-74582",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-08-21T16:31:55.283Z",
    "updatedAt": "2026-10-16T19:05:58.230Z",
    "importedAt": "2026-10-24T01:58:30.346Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "packet: use consistent hard_header_len in non-ring send paths",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\npacket: use consistent hard_header_len in non-ring send paths\n\npacket_snd() reads dev->hard_header_len multiple times while allocating\nand constructing an skb. Device reconfiguration can change this value\nconcurrently, for example through bonding device type changes.\n\nFor SOCK_RAW, packet_snd() can save a larger value in reserve and later\nallocate headroom using a smaller value. Moving skb->data back by reserve\nthen places it before skb->head, and the following copy from userspace can\nattempt an out-of-bounds write.\n\npacket_sendmsg_spkt() has the same issue because it calculates its\nreservation and header offset from separate reads before dropping the RCU\nread lock to allocate the skb.\n\nAdd LL_RESERVED_SPACE_EX() for callers that already saved a header length.\nRead hard_header_len once in packet_snd() and use it for allocation and\nconstruction. In packet_sendmsg_spkt(), preserve the allocation-time value\nthrough the device lookup retry.\n\nThe separate SOCK_DGRAM consistency problem between hard_header_len and\nheader_ops->create is not addressed here.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "bcd4df60ac9481b1ceffdfe5ec38fe51dcaae812"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "78a47127e33c340bc6d38dcc4552a094b4f5cc77"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "142e287b3a25cfe909215177c23243e7fc5ae2b1"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "91f041451f967cd87ed722a8f43c0b767a64f1a0"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9052756290962ffb9a661bcf319e92dedaaedfed"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5bb10753d428aadfc356a2bfe9acea09c82a62ec"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b06b6fce6d7deaf7238e09b48ce3b1125ff41acd"
            },
            {
              "version": "b84bbaf7a6c8cca24f8acf25a2c8e46913a947ba",
              "status": "affected",
              "versionType": "git",
              "lessThan": "03390aa32e669cc4ecd7d34108e2e1afc13d689d"
            },
            {
              "version": "d9fb8cc230b2a4757e9fe4f81468f81212d4deaa",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "6190cce26e40bf71c4d375b21eea74bb07b6a0f3",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "01a658c1b9d4b5393c38d5a92d9112ab1425382a",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "8809ae6747e760e6f1d2453ceb08c9bcc4939766",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "4.4.133",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.5"
            },
            {
              "version": "4.9.103",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.10"
            },
            {
              "version": "4.14.44",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.15"
            },
            {
              "version": "4.16.12",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.17"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.17",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.17"
            },
            {
              "version": "5.10.267",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.218",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.185",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.152",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.104",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.45",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.1.9",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "version": "7.2",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}