CVE-2026-74724 — Linux Vulnerability Details

What is CVE-2026-74724?

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such place is ip_vs_nat_icmp where we can write after the validated area. Fix it by providing ciph argument just like it is done for IPv6 and use ciph->len as offset to the embedded transport header. Modify some IPv4 header checks by reading the ihl field only once.

1 affected-product entry is recorded, across 1 vendor, listed below. The identifier was first published 44 days ago.

Severity and exploitation probability

EPSS (FIRST): 0.2% probability of exploitation in the next 30 days, higher than 10.7% of all scored CVEs
CISA KEV: Not listed in the CISA Known Exploited Vulnerabilities catalog
Threadlinqs priority: 0.4/10 — a Threadlinqs composite of the CVSS base score, the EPSS percentile and public exploit availability
Published: 2026-08-22

Is CVE-2026-74724 being exploited?

It currently carries a trending score of 32 in the Threadlinqs vulnerability feed.

Affected products and versions

Linux: Linux

How to fix CVE-2026-74724

No vendor patch reference has been recorded for CVE-2026-74724 in the tracked sources. Follow the references below for a fix, and treat the products listed above as exposed until the vendor states otherwise.

Threat activity tracking CVE-2026-74724

No threat campaign in the Threadlinqs corpus currently references CVE-2026-74724, in its CVE list or as an indicator. The linkage is recomputed from the live corpus on every daily ingest, so this section fills in as soon as a tracked campaign cites the identifier.

Sources

Enriched from CVE.org, FIRST EPSS. Last verified by Threadlinqs on 2026-08-24.

Other references

Showing 5 of 6 recorded references.