CVE-2026-74455

CVE-2026-74455

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: peak_usb: validate uCAN receive record lengths

pcan_usb_fd_decode_buf() walks uCAN records packed in one USB

receive buffer.

Require each record to contain the fixed header for its type, and verify

CAN payload bytes before copying them into the skb.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-08-15T17:17Z
References (8)
https://git.kernel.org/stable/c/2427ef427bdd78d862c7c76597bfd9eda88b81f1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/276d989cd2dd88e2b7ab2c96fd10c86836b12781 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2c8f08f3641a074da40acf05baa5a18ae2739260 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6067c878e38d02a3d5c43497347e143f85c9064a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/89c92a8052698dbbd3652a77c04d02bbd74a3275 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/93fcab2c6968446316bbb49548848df604d6346f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf9d787b7e1ef59be19b35abca08194772deb97e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d9c115948c3dd5fcc2d0245cec5eb76c098503c8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 12:26Z
    can: peak_usb: validate uCAN receive record lengths
    cvelistv5