CVE-2026-74627
Received Received - Intake

Linux Kernel Net-IoV and Page Fragment Mixing Vulnerability

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have net_iov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopy_fill_skb_from_devmem().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74627
EUVD
EUVD-2026-64564

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the net: devmem component where mixing net_iov and page-backed fragments in a single skb (socket buffer) can cause system crashes or instability. The issue is prevented by ensuring only one type is used in zerocopy_fill_skb_from_devmem().

Impact Analysis

If exploited, this vulnerability could lead to kernel crashes, denial-of-service conditions, or potential privilege escalation. Systems using affected kernel versions may become unstable or unresponsive.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the net: devmem vulnerability. Monitor kernel logs for skb-related errors indicating mixing of net_iov and page-backed frags.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74627. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart