SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-74718

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

A reference leak in the Linux kernel's devlink functionality can occur during the reload process of network namespaces, specifically when the requested namespace differs from the current one and the reload action is not DRIVER_REINIT. This vulnerability can lead to resource exhaustion and potential denial of service due to unreleased network namespace references. Linux system administrators and developers working with network functionalities should prioritize addressing this issue to maintain system stability and performance.

CVE
CVE-2026-74718
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlink_netns_get(), which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not DRIVER_REINIT, the function returns -EOPNOTSUPP without releasing the reference. Add the missing put_net() on this error path.