Out-of-bounds read in Linux kernel - CVE-2026-74524
Published: August 16, 2026
Vulnerability identifier: #VU143259
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74524
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to an out-of-bounds page-table walk in remove_pud_mapping() and remove_p4d_mapping() when handling memory hot-remove on folded RISC-V page-table levels. A local user can trigger memory hot-remove operations to cause a denial of service.
On Sv48, the P4D level is folded, and on Sv39, both P4D and PUD levels are folded.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74524
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1