{"id":"CVE-2026-74267","summary":"net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen\n\nWhenever codel drops packets during peek, it calls\nqdisc_tree_reduce_backlog. An issue arises because it calls\nqdisc_tree_reduce_backlog before it reincrements the qlen. If qlen drops\nto zero, but peek returns an skb, the parent's qlen_notify callback will\nbe executed even though codel still has 1 packet on the queue and, thus,\nwill mistakenly deactivate the parent's class causing issues like a wild\nmemory access when qfq has codel as a child:\n\n[   36.339843][  T370] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI\n[   36.340408][  T370] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127]\n[   36.340737][  T370] CPU: 2 UID: 0 PID: 370 Comm: tc Not tainted 7.1.0-rc5-00287-g66e13b626592 #87 PREEMPT(full)\n[   36.341113][  T370] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011\n[   36.341357][  T370] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:1029 (discriminator 2) include/linux/list.h:1043 (discriminator 2) net/sched/sch_qfq.c:1369 (discriminator 2) net/sched/sch_qfq.c:1395 (discriminator 2)) sch_qfq\n[   36.342221][  T370] RSP: 0018:ffff8881100ef370 EFLAGS: 00010216\n[   36.342422][  T370] RAX: 0000000000000000 RBX: ffff8881058a9568 RCX: dffffc0000000000\n[   36.342664][  T370] RDX: 1ffff11021064dc3 RSI: ffff888108326e00 RDI: dffffc0000000000\n[   36.342905][  T370] RBP: ffff8881058a8280 R08: dead000000000122 R09: 1bd5a00000000024\n[   36.343140][  T370] R10: fffffbfff2940329 R11: fffffbfff2940329 R12: 0000000000000000\n[   36.343383][  T370] R13: dead000000000100 R14: ffff8881058a9580 R15: ffff8881058a9578\n[   36.343631][  T370] FS:  00007fc04b0ca780(0000) GS:ffff888184fef000(0000) knlGS:0000000000000000\n[   36.343911][  T370] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[   36.344116][  T370] CR2: 0000557c02c02000 CR3: 000000010e0ba000 CR4: 0000000000750ef0\n[   36.344359][  T370] PKRU: 55555554\n[   36.344481][  T370] Call Trace:\n...\n[   36.345054][  T370] qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1487) sch_qfq\n[   36.345222][  T370]  qdisc_reset (net/sched/sch_generic.c:1057)\n[   36.345503][  T370]  __qdisc_destroy (net/sched/sch_generic.c:1096)\n[   36.345677][  T370]  qdisc_graft (net/sched/sch_api.c:1062 net/sched/sch_api.c:1053 net/sched/sch_api.c:1159)\n[   36.346335][  T370]  tc_get_qdisc (net/sched/sch_api.c:1528 net/sched/sch_api.c:1556)\n\nFix this by only calling qdisc_tree_reduce_backlog in peek after the\nqlen is restored.","modified":"2026-08-18T03:56:28.703001918Z","published":"2026-08-15T05:57:42.263Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74267.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/52f1da34c9f4d5bdc1e8b44242da5c7ba8db85f3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/755108bb7a5083e911294c416cfea605dc75632f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7a05af7f58566682b73578b72ca8e53a268c43bd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/91e0a793a72374c20ab31a40ccec21373e82e973"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bb9cfd874ee884117b33e92a002b9a45b48202f4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e4615aa6bb7802944ae790cb4b3ef8c1b7491af3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e8c6dbadf139cb14ea6ed14add6ed6e88504dedd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/eba49fd85995a3851c597fa2d214f8d21736e1d8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74267.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74267"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"cc71a757da78dd4aa1b4a9b19cb011833730ccf2"},{"fixed":"bb9cfd874ee884117b33e92a002b9a45b48202f4"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"eda741fe155ddf5ecd2dd3bfbd4fc3c0c7dbb450"},{"fixed":"7a05af7f58566682b73578b72ca8e53a268c43bd"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"829c49b6b2ff45b043739168fd1245e4e1a91a30"},{"fixed":"eba49fd85995a3851c597fa2d214f8d21736e1d8"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"2f9761a94bae33d26e6a81b31b36e7d776d93dc1"},{"fixed":"e8c6dbadf139cb14ea6ed14add6ed6e88504dedd"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4d55144b12e742404bb3f8fee6038bafbf45619d"},{"fixed":"e4615aa6bb7802944ae790cb4b3ef8c1b7491af3"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"342debc12183b51773b3345ba267e9263bdfaaef"},{"fixed":"755108bb7a5083e911294c416cfea605dc75632f"},{"fixed":"91e0a793a72374c20ab31a40ccec21373e82e973"},{"fixed":"52f1da34c9f4d5bdc1e8b44242da5c7ba8db85f3"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"7a742a9506849d1c1aa71e36c89855ceddc7d58e"},{"last_affected":"e73c838c80dccb9e4f19becc11d9f3cb4a27d483"},{"last_affected":"a57fe60ef4cf96bfbb6b58397ec28bdb5a5c6b31"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.10.241"},{"fixed":"5.10.261"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.15.190"},{"fixed":"5.15.212"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.1.135"},{"fixed":"6.1.178"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.6.88"},{"fixed":"6.6.145"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.12.24"},{"fixed":"6.12.97"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.4.297"},{"fixed":"5.5"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.13.12"},{"fixed":"6.14"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.14.3"},{"fixed":"6.15"}]}],"versions":["v5.10.260","v5.10.259","v5.10.258","v5.10.257","v5.10.256","v5.10.255","v5.10.254","v5.10.253","v5.10.252","v5.10.251","v5.10.250","v5.10.249","v5.10.248","v5.10.247","v5.10.246","v5.10.245","v5.10.244","v5.10.243","v5.10.242","v5.10.241","v5.15.211","v5.15.210","v5.15.209","v5.15.208","v5.15.207","v5.15.206","v5.15.205","v5.15.204","v5.15.203","v5.15.202","v5.15.201","v5.15.200","v5.15.199","v5.15.198","v5.15.197","v5.15.196","v5.15.195","v5.15.194","v5.15.193","v5.15.192","v5.15.191","v5.15.190","v6.1.177","v6.1.176","v6.1.175","v6.1.174","v6.1.173","v6.1.172","v6.1.171","v6.1.170","v6.1.169","v6.1.168","v6.1.167","v6.1.166","v6.1.165","v6.1.164","v6.1.163","v6.1.162","v6.1.161","v6.1.160","v6.1.159","v6.1.158","v6.1.157","v6.1.156","v6.1.155","v6.1.154","v6.1.153","v6.1.152","v6.1.151","v6.1.150","v6.1.149","v6.1.148","v6.1.147","v6.1.146","v6.1.145","v6.1.144","v6.1.143","v6.1.142","v6.1.141","v6.1.140","v6.1.139","v6.1.138","v6.1.137","v6.1.136","v6.1.135","v6.6.144","v6.6.143","v6.6.142","v6.6.141","v6.6.140","v6.6.139","v6.6.138","v6.6.137","v6.6.136","v6.6.135","v6.6.134","v6.6.133","v6.6.132","v6.6.131","v6.6.130","v6.6.129","v6.6.128","v6.6.127","v6.6.126","v6.6.125","v6.6.124","v6.6.123","v6.6.122","v6.6.121","v6.6.120","v6.6.119","v6.6.118","v6.6.117","v6.6.116","v6.6.115","v6.6.114","v6.6.113","v6.6.112","v6.6.111","v6.6.110","v6.6.109","v6.6.108","v6.6.107","v6.6.106","v6.6.105","v6.6.104","v6.6.103","v6.6.102","v6.6.101","v6.6.100","v6.6.99","v6.6.98","v6.6.97","v6.6.96","v6.6.95","v6.6.94","v6.6.93","v6.6.92","v6.6.91","v6.6.90","v6.6.89","v6.6.88","v6.12.96","v6.12.95","v6.12.94","v6.12.93","v6.12.92","v6.12.91","v6.12.90","v6.12.89","v6.12.88","v6.12.87","v6.12.86","v6.12.85","v6.12.84","v6.12.83","v6.12.82","v6.12.81","v6.12.80","v6.12.79","v6.12.78","v6.12.77","v6.12.76","v6.12.75","v6.12.74","v6.12.73","v6.12.72","v6.12.71","v6.12.70","v6.12.69","v6.12.68","v6.12.67","v6.12.66","v6.12.65","v6.12.64","v6.12.63","v6.12.62","v6.12.61","v6.12.60","v6.12.59","v6.12.58","v6.12.57","v6.12.56","v6.12.55","v6.12.54","v6.12.53","v6.12.52","v6.12.51","v6.12.50","v6.12.49","v6.12.48","v6.12.47","v6.12.46","v6.12.45","v6.12.44","v6.12.43","v6.12.42","v6.12.41","v6.12.40","v6.12.39","v6.12.38","v6.12.37","v6.12.36","v6.12.35","v6.12.34","v6.12.33","v6.12.32","v6.12.31","v6.12.30","v6.12.29","v6.12.28","v6.12.27","v6.12.26","v6.12.25","v6.12.24","v5.4.296","v6.14-rc3","v5.4.295","v5.4.294","v5.4.293","v6.14","v5.4.292","v6.14.2","v6.13.11","v6.14.1","v6.13.10","v5.4.291","v6.13.9","v6.14-rc1","v6.14-rc7","v6.14-rc6","v6.13.8","v6.14-rc4","v6.14-rc5","v6.13.7","v6.14-rc2","v6.13.6","v5.4.290","v6.13.5","v6.13.4","v6.13.3","v6.13","v6.13-rc1","v6.13.2","v6.13.1","v5.4.289","v6.13-rc6","v6.13-rc7","v6.13-rc2","v6.13-rc5","v6.13-rc3","v5.4.288","v6.12-rc1","v6.13-rc4","v5.4.287","v5.4.286","v6.12","v6.12-rc7","v5.4.285","v6.12-rc3","v6.12-rc4","v6.12-rc6","v6.12-rc5","v5.4.284","v6.12-rc2","v6.11-rc1","v6.11-rc5","v6.11","v6.11-rc7","v6.10-rc1","v6.11-rc6","v6.11-rc3","v5.4.283","v6.11-rc4","v6.11-rc2","v5.4.282","v6.10","v5.4.281","v5.4.280","v6.10-rc6","v5.4.279","v6.10-rc7","v6.10-rc3","v6.9-rc1","v6.10-rc5","v6.10-rc2","v5.4.278","v6.10-rc4","v6.9","v5.4.277","v5.4.276","v5.4.275","v6.9-rc6","v6.9-rc7","v6.9-rc5","v6.9-rc3","v6.9-rc2","v6.8","v6.9-rc4","v5.4.274","v6.8-rc1","v5.4.273","v5.4.272","v6.7-rc1","v6.8-rc7","v5.4.271","v6.8-rc6","v6.8-rc5","v6.8-rc4","v6.8-rc3","v6.8-rc2","v5.4.270","v5.4.269","v5.4.268","v5.4.267","v6.7","v6.7-rc3","v6.7-rc8","v5.4.266","v6.7-rc7","v5.4.265","v6.7-rc6","v6.7-rc2","v5.4.264","v6.7-rc4","v6.7-rc5","v5.4.263","v5.4.262","v6.6","v5.4.261","v5.4.260","v6.6-rc1","v5.4.259","v6.6-rc5","v6.6-rc3","v6.6-rc7","v6.6-rc6","v6.6-rc4","v5.4.258","v6.6-rc2","v5.4.257","v6.5","v5.4.256","v6.5-rc1","v6.5-rc2","v6.5-rc7","v5.4.255","v5.4.254","v6.5-rc4","v6.5-rc3","v6.5-rc6","v5.4.253","v6.5-rc5","v5.4.252","v5.4.251","v5.4.250","v5.4.249","v6.4","v6.4-rc7","v6.4-rc1","v6.4-rc6","v5.4.248","v6.4-rc5","v6.4-rc3","v5.4.247","v6.4-rc4","v6.4-rc2","v5.4.246","v5.4.245","v5.4.244","v5.4.243","v5.4.242","v6.3","v6.3-rc1","v5.4.241","v6.3-rc7","v6.3-rc2","v6.3-rc3","v6.3-rc5","v6.3-rc6","v6.3-rc4","v5.4.240","v6.2-rc6","v5.4.239","v5.4.238","v5.4.237","v5.4.236","v5.4.235","v5.4.234","v6.2-rc1","v6.2","v5.4.233","v5.4.232","v6.2-rc2","v6.2-rc8","v5.4.231","v6.2-rc5","v6.2-rc4","v6.2-rc7","v6.2-rc3","v5.4.230","v5.4.229","v5.4.228","v6.1-rc1","v6.1","v5.4.227","v6.1-rc8","v6.1-rc3","v5.4.226","v6.1-rc6","v5.4.225","v6.1-rc7","v6.1-rc4","v6.1-rc2","v6.1-rc5","v5.4.224","v5.4.223","v5.4.222","v5.4.221","v5.4.220","v6.0-rc1","v5.4.219","v5.4.218","v6.0","v5.4.217","v6.0-rc7","v5.4.216","v5.4.215","v6.0-rc3","v6.0-rc2","v5.4.214","v6.0-rc6","v6.0-rc4","v6.0-rc5","v5.4.213","v5.4.212","v5.4.211","v5.19","v5.4.210","v5.19-rc1","v5.4.209","v5.4.208","v5.19-rc5","v5.19-rc8","v5.19-rc6","v5.18","v5.19-rc2","v5.19-rc7","v5.4.207","v5.19-rc3","v5.4.206","v5.19-rc4","v5.4.205","v5.4.204","v5.4.203","v5.4.202","v5.18-rc1","v5.4.201","v5.4.200","v5.4.199","v5.4.198","v5.4.197","v5.4.196","v5.18-rc7","v5.18-rc2","v5.4.195","v5.4.194","v5.18-rc5","v5.17","v5.18-rc4","v5.18-rc3","v5.18-rc6","v5.4.193","v5.4.192","v5.4.191","v5.4.190","v5.4.189","v5.4.188","v5.17-rc6","v5.17-rc4","v5.4.187","v5.17-rc8","v5.17-rc7","v5.4.186","v5.17-rc1","v5.4.185","v5.17-rc3","v5.4.184","v5.17-rc2","v5.4.183","v5.4.182","v5.17-rc5","v5.16","v5.4.181","v5.4.180","v5.4.179","v5.4.178","v5.4.177","v5.4.176","v5.4.175","v5.4.174","v5.4.173","v5.4.172","v5.16-rc1","v5.4.171","v5.16-rc8","v5.4.170","v5.16-rc5","v5.16-rc6","v5.4.169","v5.16-rc7","v5.4.168","v5.16-rc3","v5.16-rc2","v5.4.167","v5.4.166","v5.16-rc4","v5.4.165","v5.4.164","v5.15","v5.4.163","v5.4.162","v5.4.161","v5.4.160","v5.4.159","v5.4.158","v5.4.157","v5.15-rc2","v5.15-rc1","v5.15-rc4","v5.15-rc7","v5.4.156","v5.15-rc3","v5.15-rc5","v5.4.155","v5.15-rc6","v5.4.154","v5.14","v5.14-rc3","v5.4.153","v5.4.152","v5.4.151","v5.14-rc1","v5.4.150","v5.4.149","v5.4.148","v5.4.147","v5.4.146","v5.4.145","v5.4.144","v5.4.143","v5.14-rc2","v5.14-rc7","v5.14-rc6","v5.4.142","v5.13-rc1","v5.14-rc5","v5.14-rc4","v5.4.141","v5.4.140","v5.4.139","v5.4.138","v5.4.137","v5.13","v5.4.136","v5.4.135","v5.4.134","v5.4.133","v5.4.132","v5.4.131","v5.4.130","v5.13-rc6","v5.4.129","v5.13-rc7","v5.4.128","v5.13-rc3","v5.13-rc2","v5.13-rc4","v5.4.127","v5.4.126","v5.13-rc5","v5.4.125","v5.4.124","v5.4.123","v5.4.122","v5.4.121","v5.12","v5.4.120","v5.4.119","v5.4.118","v5.4.117","v5.4.116","v5.12-rc2","v5.12-rc1-dontuse","v5.12-rc1","v5.4.115","v5.4.114","v5.12-rc8","v5.12-rc3","v5.4.113","v5.12-rc7","v5.12-rc5","v5.4.112","v5.12-rc6","v5.4.111","v5.4.110","v5.4.109","v5.12-rc4","v5.10","v5.4.108","v5.11","v5.4.107","v5.4.106","v5.4.105","v5.4.104","v5.4.103","v5.4.102","v5.4.101","v5.4.100","v5.11-rc3","v5.4.99","v5.11-rc7","v5.11-rc6","v5.4.98","v5.11-rc5","v5.11-rc1","v5.4.97","v5.11-rc4","v5.4.96","v5.11-rc2","v5.4.95","v5.4.94","v5.4.93","v5.4.92","v5.4.91","v5.10-rc1","v5.4.90","v5.4.89","v5.4.88","v5.4.87","v5.4.86","v5.4.85","v5.4.84","v5.10-rc7","v5.4.83","v5.10-rc4","v5.10-rc3","v5.10-rc6","v5.9","v5.4.82","v5.10-rc2","v5.10-rc5","v5.4.81","v5.4.80","v5.4.79","v5.4.78","v5.4.77","v5.4.76","v5.4.75","v5.4.74","v5.4.73","v5.4.72","v5.9-rc1","v5.9-rc7","v5.4.71","v5.4.70","v5.9-rc8","v5.9-rc6","v5.9-rc4","v5.9-rc5","v5.4.69","v5.9-rc3","v5.4.68","v5.4.67","v5.9-rc2","v5.4.66","v5.4.65","v5.4.64","v5.4.63","v5.4.62","v5.8","v5.4.61","v5.4.60","v5.4.59","v5.4.58","v5.4.57","v5.4.56","v5.7","v5.8-rc2","v5.8-rc1","v5.8-rc7","v5.4.55","v5.8-rc5","v5.4.54","v5.8-rc3","v5.8-rc4","v5.4.53","v5.8-rc6","v5.4.52","v5.4.51","v5.4.50","v5.4.49","v5.7-rc4","v5.4.48","v5.4.47","v5.4.46","v5.4.45","v5.4.44","v5.7-rc7","v5.7-rc1","v5.4.43","v5.7-rc3","v5.7-rc2","v5.7-rc5","v5.4.42","v5.7-rc6","v5.4.41","v5.4.40","v5.6","v5.4.39","v5.4.38","v5.4.37","v5.4.36","v5.4.35","v5.4.34","v5.4.33","v5.4.32","v5.4.31","v5.4.30","v5.6-rc1","v5.4.29","v5.4.28","v5.6-rc7","v5.6-rc6","v5.6-rc3","v5.6-rc4","v5.6-rc2","v5.6-rc5","v5.4.27","v5.4.26","v5.4.25","v5.4.24","v5.4.23","v5.4.22","v5.4.21","v5.4.20","v5.4.19","v5.4.18","v5.5","v5.4.17","v5.5-rc5","v5.4.16","v5.5-rc7","v5.5-rc2","v5.5-rc1","v5.4.15","v5.4","v5.4.14","v5.5-rc4","v5.4.13","v5.5-rc3","v5.5-rc6","v5.4.12","v5.4.11","v5.4.10","v5.4.9","v5.4.8","v5.4.7","v5.4.6","v5.4.5","v5.4.4","v5.4.3","v5.4.2","v5.4-rc1","v5.4.1","v5.4-rc6","v5.4-rc3","v5.4-rc4","v5.4-rc8","v5.4-rc7","v5.4-rc5","v5.3","v5.4-rc2","v5.3-rc5","v5.3-rc1","v5.3-rc2","v5.3-rc3","v5.3-rc8","v5.3-rc7","v5.3-rc4","v5.2","v5.3-rc6","v5.2-rc2","v5.2-rc7","v5.2-rc4","v5.2-rc1","v5.2-rc5","v5.2-rc6","v5.2-rc3","v5.1","v5.0-rc8","v5.1-rc7","v5.1-rc1","v5.1-rc6","v5.1-rc5","v5.0","v5.1-rc3","v5.1-rc2","v5.1-rc4","v5.0-rc1","v5.0-rc4","v5.0-rc3","v5.0-rc6","v5.0-rc7","v5.0-rc2","v5.0-rc5","v4.20-rc1","v4.19","v4.20","v4.20-rc7","v4.20-rc5","v4.20-rc6","v4.20-rc4","v4.20-rc2","v4.20-rc3","v4.19-rc2","v4.19-rc8","v4.19-rc4","v4.19-rc1","v4.19-rc7","v4.19-rc6","v4.19-rc5","v4.19-rc3","v4.18","v4.18-rc1","v4.18-rc8","v4.18-rc2","v4.18-rc5","v4.18-rc6","v4.18-rc7","v4.17","v4.18-rc3","v4.18-rc4","v4.17-rc1","v4.17-rc2","v4.17-rc7","v4.17-rc3","v4.17-rc4","v4.16","v4.17-rc6","v4.17-rc5","v4.16-rc7","v4.16-rc4","v4.16-rc1","v4.16-rc2","v4.16-rc5","v4.16-rc3","v4.16-rc6","v4.14","v4.15","v4.15-rc1","v4.15-rc4","v4.15-rc9","v4.15-rc8","v4.15-rc7","v4.15-rc3","v4.15-rc2","v4.15-rc5","v4.15-rc6","v4.14-rc1","v4.14-rc7","v4.14-rc3","v4.13","v4.14-rc8","v4.14-rc4","v4.14-rc6","v4.14-rc2","v4.14-rc5","v4.13-rc2","v4.13-rc1","v4.13-rc3","v4.13-rc7","v4.13-rc4","v4.13-rc5","v4.13-rc6","v4.12-rc1","v4.12","v4.12-rc5","v4.12-rc7","v4.12-rc6","v4.12-rc4","v4.12-rc2","v4.12-rc3","v4.11","v4.11-rc1","v4.11-rc6","v4.11-rc8","v4.11-rc7","v4.11-rc3","v4.11-rc5","v4.11-rc2","v4.11-rc4","v4.10","v4.9","v4.10-rc8","v4.10-rc3","v4.10-rc1","v4.10-rc7","v4.10-rc6","v4.10-rc2","v4.10-rc5","v4.10-rc4","v4.9-rc7","v4.9-rc6","v4.9-rc8","v4.9-rc1","v4.9-rc5","v4.9-rc3","v4.9-rc4","v4.9-rc2","v4.8","v4.8-rc8","v4.8-rc2","v4.8-rc1","v4.8-rc7","v4.8-rc6","v4.8-rc5","v4.8-rc4","v4.8-rc3","v4.7","v4.7-rc4","v4.7-rc2","v4.7-rc1","v4.7-rc7","v4.7-rc6","v4.7-rc3","v4.7-rc5","v4.6","v4.6-rc1","v4.6-rc6","v4.6-rc4","v4.6-rc7","v4.6-rc5","v4.5-rc4","v4.6-rc2","v4.6-rc3","v4.5","v4.4","v4.5-rc1","v4.5-rc6","v4.5-rc2","v4.5-rc7","v4.5-rc5","v4.5-rc3","v4.4-rc1","v4.4-rc2","v4.4-rc8","v4.4-rc3","v4.4-rc7","v4.4-rc5","v4.4-rc6","v4.4-rc4","v4.3","v4.3-rc1","v4.3-rc6","v4.3-rc4","v4.3-rc2","v4.3-rc7","v4.3-rc5","v4.3-rc3","v4.2","v4.2-rc2","v4.2-rc1","v4.2-rc8","v4.2-rc4","v4.2-rc6","v4.2-rc7","v4.0-rc5","v4.2-rc5","v4.2-rc3","v4.1-rc2","v4.1","v4.1-rc1","v4.1-rc8","v4.1-rc7","v4.1-rc6","v4.1-rc3","v4.1-rc4","v4.0","v4.1-rc5","v4.0-rc1","v4.0-rc2","v4.0-rc7","v4.0-rc3","v4.0-rc6","v4.0-rc4","v3.19","v3.19-rc7","v3.19-rc5","v3.19-rc1","v3.19-rc6","v3.19-rc4","v3.18-rc1","v3.19-rc3","v3.19-rc2","v3.18","v3.18-rc7","v3.18-rc6","v3.18-rc2","v3.18-rc3","v3.18-rc4","v3.18-rc5","v3.17","v3.17-rc1","v3.17-rc7","v3.17-rc2","v3.17-rc4","v3.16","v3.17-rc5","v3.17-rc6","v3.17-rc3","v3.16-rc7","v3.16-rc1","v3.16-rc3","v3.16-rc5","v3.16-rc6","v3.16-rc2","v3.16-rc4","v3.13","v3.15","v3.15-rc5","v3.15-rc8","v3.15-rc1","v3.15-rc6","v3.15-rc3","v3.15-rc7","v3.15-rc2","v3.15-rc4","v3.14","v3.14-rc4","v3.14-rc8","v3.14-rc7","v3.14-rc6","v3.14-rc1","v3.14-rc2","v3.14-rc5","v3.14-rc3","v3.13-rc6","v3.13-rc8","v3.12","v3.13-rc7","v3.13-rc1","v3.13-rc4","v3.13-rc3","v3.13-rc5","v3.13-rc2","v3.12-rc7","v3.12-rc3","v3.12-rc6","v3.12-rc1","v3.12-rc5","v3.11","v3.12-rc2","v3.12-rc4","v3.11-rc7","v3.11-rc2","v3.11-rc5","v3.11-rc1","v3.11-rc3","v3.11-rc4","v3.11-rc6","v3.10-rc2","v3.10","v3.10-rc7","v3.10-rc6","v3.10-rc1","v3.10-rc5","v3.10-rc3","v3.10-rc4","v3.9","v3.9-rc2","v3.9-rc7","v3.9-rc8","v3.9-rc3","v3.9-rc6","v3.9-rc5","v3.9-rc4","v3.9-rc1","v3.8","v3.8-rc7","v3.8-rc6","v3.8-rc5","v3.8-rc2","v3.8-rc1","v3.8-rc3","v3.8-rc4","v3.7","v3.7-rc1","v3.6","v3.7-rc6","v3.7-rc7","v3.7-rc3","v3.7-rc8","v3.7-rc2","v3.7-rc4","v3.7-rc5","v3.6-rc7","v3.6-rc1","v3.5-rc3","v3.6-rc6","v3.6-rc5","v3.5","v3.6-rc3","v3.6-rc4","v3.6-rc2","v3.4-rc4","v3.5-rc7","v3.5-rc5","v3.5-rc6","v3.5-rc2","v3.5-rc1","v3.5-rc4","v3.4","v3.4-rc2","v3.4-rc1","v3.4-rc7","v3.4-rc6","v3.4-rc3","v3.4-rc5","v3.3","v3.3-rc6","v3.3-rc3","v3.3-rc7","v3.3-rc2","v3.3-rc5","v3.2","v3.3-rc4","v3.3-rc1","v3.2-rc4","v3.2-rc7","v3.2-rc6","v3.2-rc5","v3.2-rc3","v3.1","v3.2-rc2","v3.2-rc1","v3.1-rc1","v3.1-rc9","v3.1-rc8","v3.1-rc10","v3.1-rc7","v3.1-rc3","v3.1-rc2","v3.1-rc4","v3.1-rc5","v3.0","v3.1-rc6","v3.0-rc7","v3.0-rc4","v3.0-rc6","v3.0-rc5","v3.0-rc3","v3.0-rc1","v2.6.39","v3.0-rc2","v2.6.38","v2.6.39-rc2","v2.6.39-rc7","v2.6.39-rc5","v2.6.39-rc1","v2.6.38-rc7","v2.6.39-rc6","v2.6.39-rc4","v2.6.39-rc3","v2.6.37","v2.6.38-rc1","v2.6.38-rc8","v2.6.38-rc2","v2.6.38-rc6","v2.6.38-rc5","v2.6.38-rc4","v2.6.38-rc3","v2.6.37-rc4","v2.6.37-rc2","v2.6.36","v2.6.37-rc5","v2.6.37-rc8","v2.6.37-rc7","v2.6.37-rc6","v2.6.37-rc1","v2.6.37-rc3","v2.6.36-rc6","v2.6.35-rc4","v2.6.36-rc8","v2.6.35","v2.6.36-rc7","v2.6.36-rc3","v2.6.36-rc5","v2.6.36-rc4","v2.6.36-rc2","v2.6.36-rc1","v2.6.35-rc5","v2.6.35-rc6","v2.6.34","v2.6.35-rc3","v2.6.35-rc1","v2.6.35-rc2","v2.6.34-rc7","v2.6.34-rc6","v2.6.34-rc5","v2.6.34-rc4","v2.6.34-rc3","v2.6.34-rc2","v2.6.34-rc1","v2.6.33","v2.6.33-rc6","v2.6.33-rc8","v2.6.33-rc4","v2.6.33-rc5","v2.6.33-rc3","v2.6.33-rc7","v2.6.33-rc2","v2.6.32","v2.6.33-rc1","v2.6.32-rc8","v2.6.32-rc7","v2.6.32-rc6","v2.6.31","v2.6.32-rc5","v2.6.32-rc4","v2.6.32-rc2","v2.6.32-rc1","v2.6.32-rc3","v2.6.31-rc9","v2.6.31-rc1","v2.6.31-rc7","v2.6.31-rc8","v2.6.31-rc6","v2.6.30-rc6","v2.6.30","v2.6.31-rc4","v2.6.31-rc5","v2.6.31-rc3","v2.6.31-rc2","v2.6.30-rc7","v2.6.30-rc8","v2.6.30-rc5","v2.6.30-rc3","v2.6.30-rc4","v2.6.30-rc1","v2.6.30-rc2","v2.6.29","v2.6.29-rc8","v2.6.29-rc7","v2.6.29-rc5","v2.6.29-rc1","v2.6.29-rc6","v2.6.29-rc4","v2.6.29-rc3","v2.6.29-rc2","v2.6.28","v2.6.28-rc7","v2.6.28-rc9","v2.6.28-rc8","v2.6.28-rc6","v2.6.28-rc5","v2.6.28-rc4","v2.6.28-rc2","v2.6.28-rc3","v2.6.28-rc1","v2.6.27","v2.6.27-rc7","v2.6.27-rc9","v2.6.27-rc8","v2.6.27-rc5","v2.6.27-rc6","v2.6.27-rc4","v2.6.27-rc1","v2.6.27-rc3","v2.6.27-rc2","v2.6.26","v2.6.26-rc9","v2.6.26-rc8","v2.6.26-rc3","v2.6.26-rc7","v2.6.26-rc6","v2.6.26-rc5","v2.6.26-rc4","v2.6.26-rc2","v2.6.26-rc1","v2.6.25","v2.6.25-rc7","v2.6.25-rc9","v2.6.25-rc8","v2.6.25-rc6","v2.6.25-rc5","v2.6.25-rc3","v2.6.25-rc4","v2.6.24","v2.6.25-rc2","v2.6.25-rc1","v2.6.24-rc8","v2.6.24-rc7","v2.6.24-rc6","v2.6.24-rc5","v2.6.24-rc4","v2.6.24-rc3","v2.6.24-rc2","v2.6.24-rc1","v2.6.23","v2.6.23-rc9","v2.6.23-rc8","v2.6.23-rc5","v2.6.23-rc7","v2.6.23-rc6","v2.6.23-rc4","v2.6.23-rc3","v2.6.23-rc2","v2.6.23-rc1","v2.6.22","v2.6.22-rc7","v2.6.22-rc6","v2.6.22-rc5","v2.6.22-rc4","v2.6.22-rc3","v2.6.22-rc2","v2.6.22-rc1","v2.6.21","v2.6.21-rc7","v2.6.21-rc6","v2.6.21-rc5","v2.6.21-rc4","v2.6.21-rc3","v2.6.21-rc2","v2.6.21-rc1","v2.6.20-rc7","v2.6.20-rc6","v2.6.20-rc5","v2.6.20-rc4","v2.6.20-rc3","v2.6.20-rc1","v2.6.20-rc2","v2.6.19-rc2","v2.6.18","v2.6.19-rc1","v2.6.18-rc6","v2.6.18-rc5","v2.6.18-rc3","v2.6.18-rc2","v2.6.18-rc1","v2.6.17","v2.6.17-rc4","v2.6.17-rc6","v2.6.17-rc5","v2.6.17-rc3","v2.6.17-rc2","v2.6.17-rc1","v2.6.16","v2.6.16-rc6","v2.6.16-rc4","v2.6.16-rc5","v2.6.16-rc3","v2.6.16-rc2","v2.6.16-rc1","v2.6.15-rc7","v2.6.15-rc5","v2.6.15-rc4","v2.6.15-rc2","v2.6.15-rc1","v2.6.14-rc3","v2.6.14-rc2","v2.6.14-rc1","v2.6.13","v2.6.13-rc7","v2.6.13-rc6","v2.6.13-rc5","v2.6.13-rc3","v2.6.13-rc4","v2.6.13-rc2","v2.6.13-rc1","v2.6.12-rc4","v2.6.12-rc3","v2.6.12-rc2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74267.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.15.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74267.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}