CVE-2026-74263

Received Received - Intake

Memory Corruption in Linux Kernel t7xx Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: check skb_clone in control TX t7xx_port_ctrl_tx() clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned->len, so an skb_clone() failure results in a NULL pointer dereference. Check the clone before using it. If previous fragments were already queued, preserve the driver's existing partial-write behavior by returning the number of bytes submitted so far.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74263

EUVD

EUVD-2026-59410

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the t7xx driver for WWAN (Wireless Wide Area Network) devices. The issue occurs in the function t7xx_port_ctrl_tx() where it clones each skb fragment before transmission. If the skb_clone() operation fails, it leads to a NULL pointer dereference, causing a system crash or instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's t7xx driver for WWAN devices. Detection requires checking for kernel logs or crashes related to t7xx_port_ctrl_tx() NULL pointer dereferences. Monitor system logs with 'dmesg | grep t7xx' or 'journalctl -k | grep t7xx' for errors.

Impact Analysis

This vulnerability could cause system crashes or instability when using WWAN devices on affected Linux systems. It may lead to denial of service conditions, disrupting network connectivity or other services relying on the t7xx driver.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue in the Linux wwan t7xx driver that could cause a NULL pointer dereference due to improper skb_clone handling, potentially leading to system instability or crashes. No evidence suggests it impacts data protection, privacy, or security controls required by these regulations.

Mitigation Strategies

Apply the latest Linux kernel patches from your distribution to resolve the issue. If patches are unavailable, disable the t7xx driver by blacklisting it in the kernel module configuration until an update is applied.

Hi! I’m here to help you understand CVE-2026-74263. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70