vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-74693

net: prestera: validate firmware header length

N/A
Published: August 22, 2026 at 03:32 PM UTC
Updated: October 14, 2026 at 01:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4c2703dfd7fabb0824b3bc345f9fa47e33248c145.10
Vendor states this is fixed in 0fbcceb9d19f2d1dcdf099aee590f2517cb718bb (fixed)
Vendor states this is fixed in 363e048a9d0a6c245cbc348c8a220170afed046a (fixed)
Vendor states this is fixed in 38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240 (fixed)
Vendor states this is fixed in 470ac9cce7308e60cf2dceb448749cdd006e73de (fixed)
Vendor states this is fixed in 6fad06bb793d7089ae05b9fcf46e11be2dfe4850 (fixed)
Vendor states this is fixed in 7fa8a12296d8d5aa4b1c3904f0b354d81124cf29 (fixed)
Vendor states this is fixed in 8ae344eb540af3f457179b52bc6061416752485c (fixed)
Vendor states this is fixed in e0f382e8084117f0b11ffb070fe1079e38c0d7f9 (fixed)
Vendor states this is fixed in 5.10 (unaffected)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.104 (unaffected)
Vendor states this is fixed in 6.18.45 (unaffected)
Vendor states this is fixed in 6.6.152 (unaffected)
Vendor states this is fixed in 7.1.9 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240
Source: cverecord
https://git.kernel.org/stable/c/0fbcceb9d19f2d1dcdf099aee590f2517cb718bb
Source: cverecord
https://git.kernel.org/stable/c/e0f382e8084117f0b11ffb070fe1079e38c0d7f9
Source: cverecord
https://git.kernel.org/stable/c/6fad06bb793d7089ae05b9fcf46e11be2dfe4850
Source: cverecord
https://git.kernel.org/stable/c/470ac9cce7308e60cf2dceb448749cdd006e73de
Source: cverecord
https://git.kernel.org/stable/c/363e048a9d0a6c245cbc348c8a220170afed046a
Source: cverecord
https://git.kernel.org/stable/c/7fa8a12296d8d5aa4b1c3904f0b354d81124cf29
Source: cverecord
https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card