CVE-2026-74458
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents The wait and bulk receive paths walk variable-length commands from a USB buffer. A nonzero command shorter than CMD_HEADER_LEN can still be dispatched, and the wait path copies a matching command into a fixed caller-owned struct kvaser_cmd using the device-provided length. Reject nonzero commands that do not contain the fixed header or that extend beyond the current USB buffer item. In the wait path, also reject a matching command that exceeds the destination before copying it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74458
EUVD
EUVD-2026-59651

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
kvaser kvaser_usb_leaf *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper validation of command lengths in the kvaser_usb_leaf driver. A USB command shorter than the required header length can be processed, leading to potential buffer overflows when copying data into a fixed-size structure. The issue arises because the driver does not properly check if commands meet the minimum header size or stay within buffer bounds before processing.

Detection Guidance

This vulnerability is specific to the Linux kernel's CAN driver for Kvaser USB Leaf devices. Detection requires checking the kernel version and the presence of vulnerable code in the kvaser_usb_leaf module. Use commands like 'uname -a' to check kernel version and 'lsmod | grep kvaser_usb_leaf' to verify if the module is loaded. Inspect kernel logs for CAN-related errors or warnings.

Impact Analysis

This vulnerability could allow an attacker with physical or network access to a system using the kvaser_usb_leaf device to cause a denial of service or execute arbitrary code. It may lead to system crashes, data corruption, or unauthorized access if exploited through maliciously crafted USB commands.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the kvaser_usb_leaf module by running 'sudo modprobe -r kvaser_usb_leaf' to prevent exploitation. Ensure CAN interfaces are not exposed to untrusted networks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74458. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart