Improper input validation in Linux kernel - CVE-2026-74641
Published: August 24, 2026
Vulnerability identifier: #VU144894
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-74641
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to read and write arbitrary kernel memory or cause a denial of service.
The vulnerability exists due to improper input validation in snd_us428ctls_vm_fault() and snd_usx2y_hwdep_pcm_vm_fault() when handling mmap page faults with a user-controlled page offset. A local user can supply a crafted mmap() offset to map a kernel page outside the allocated shared memory region to read and write arbitrary kernel memory or cause a denial of service.
Exploitation requires access to the hwdep node of an attached US-X2Y device, and in the us428 control path the FPGA image must be loaded through the same node first.
Affected software
Linux kernel
How to mitigate CVE-2026-74641
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/10a87401fb3148c388e55df0148295b3b137da07
- https://git.kernel.org/stable/c/2ca1eea3cd17930daffe9e429a7c89232036ec24
- https://git.kernel.org/stable/c/34ab56ed854baa73a731cfd99af689f0b1bac444
- https://git.kernel.org/stable/c/4208db2453e1ea71b8048a5b7802360cb29a53f1
- https://git.kernel.org/stable/c/5bf5ccddf00b59f1e3ea7e65d76a5f5b5c21cc2e
- https://git.kernel.org/stable/c/ad6fedea65c6e90eda00d716c8bf20cdc437ed10
- https://git.kernel.org/stable/c/f613b4a2d87247b51a1b2b330f2e083a454125f2
- https://git.kernel.org/stable/c/f75d6f61f0d9c5c1ea725104014e10d26d1e3a00