Out-of-bounds read in Linux kernel - CVE-2026-74723
Published: August 24, 2026
Vulnerability identifier: #VU144605
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74723
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in the btrfs lzo decompression logic when reading a crafted inline lzo compressed file extent from a crafted btrfs image. A local user can supply a crafted filesystem image containing an invalid inline extent header to cause a denial of service.
The issue is triggered when the inline extent contains only an lzo header without the required segment header or payload, and user interaction is required to access the crafted filesystem data.
Affected software
Linux kernel
How to mitigate CVE-2026-74723
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3