Improper Check or Handling of Exceptional Conditions in Linux kernel - CVE-2026-74717
Published: August 24, 2026
Vulnerability identifier: #VU144615
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74717
CWE-ID: CWE-703
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper handling of error conditions in the mlx5 firmware tracer core dump logic when processing a tracer creation failure. A local user can trigger the vulnerable code path to cause a denial of service.
The issue can lead to an ERR_PTR dereference and kernel panic during core dump handling.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-74717
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.105-1
linux (Debian package) - update to 6.12.105-1
External References
- https://git.kernel.org/stable/c/04599570c3a18f9ae7aad36825eb46f3dcd2c4e3
- https://git.kernel.org/stable/c/47fe0d2571e5b446a0f0b0c1d6b99f55e51f5cc0
- https://git.kernel.org/stable/c/4aafa600d93e9551c1f24e785d57cbd4adf021d5
- https://git.kernel.org/stable/c/80094352bd40ba54a33731f9c22872493983ed6d
- https://git.kernel.org/stable/c/9a416f000285a94c1b723877547981dec8132434
- https://git.kernel.org/stable/c/af39eb111ce6b5eba9c08513b62c4868eb7e7fd5
- https://git.kernel.org/stable/c/b1d6375b9a63c9dc7e5e780d3ea9b126fe30d6cb
- https://git.kernel.org/stable/c/ee41ea49c4ab0e4015919f52ad23ec251d3b39d3