CVE-2026-74693

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/0fbcceb9d19f2d1dcdf099aee590f2517cb718bb
https://git.kernel.org/stable/c/363e048a9d0a6c245cbc348c8a220170afed046a
https://git.kernel.org/stable/c/38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240
https://git.kernel.org/stable/c/470ac9cce7308e60cf2dceb448749cdd006e73de
https://git.kernel.org/stable/c/6fad06bb793d7089ae05b9fcf46e11be2dfe4850
https://git.kernel.org/stable/c/7fa8a12296d8d5aa4b1c3904f0b354d81124cf29
https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c
https://git.kernel.org/stable/c/e0f382e8084117f0b11ffb070fe1079e38c0d7f9

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-22 16:16

Updated : 2026-08-22 16:16

NVD link : CVE-2026-74693

Mitre link : CVE-2026-74693

CVE.ORG link : CVE-2026-74693

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-74693", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "0fbcceb9d19f2d1dcdf099aee590f2517cb718bb", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "e0f382e8084117f0b11ffb070fe1079e38c0d7f9", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "6fad06bb793d7089ae05b9fcf46e11be2dfe4850", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "470ac9cce7308e60cf2dceb448749cdd006e73de", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "363e048a9d0a6c245cbc348c8a220170afed046a", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "7fa8a12296d8d5aa4b1c3904f0b354d81124cf29", "versionType": "git"}, {"status": "affected", "version": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14", "lessThan": "8ae344eb540af3f457179b52bc6061416752485c", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/marvell/prestera/prestera_pci.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"status": "unaffected", "version": "0", "lessThan": "5.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.265", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.152", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.104", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.45", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.9", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/marvell/prestera/prestera_pci.c"], "defaultStatus": "affected"}]}], "published": "2026-08-22T16:16:43.807", "references": [{"url": "https://git.kernel.org/stable/c/0fbcceb9d19f2d1dcdf099aee590f2517cb718bb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/363e048a9d0a6c245cbc348c8a220170afed046a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/470ac9cce7308e60cf2dceb448749cdd006e73de", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6fad06bb793d7089ae05b9fcf46e11be2dfe4850", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7fa8a12296d8d5aa4b1c3904f0b354d81124cf29", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e0f382e8084117f0b11ffb070fe1079e38c0d7f9", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: prestera: validate firmware header length\n\nprestera_fw_hdr_parse() reads the firmware header before checking\nthat the firmware image contains that header.\n\nReject images shorter than struct prestera_fw_header before decoding the\nmagic and version fields."}], "lastModified": "2026-08-22T16:16:43.807", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}