Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-74705 Details

Description

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/19d89b13a43640b2da2f277ee462d919d988cb6f kernel.org
https://git.kernel.org/stable/c/1ae134c012e10384cdac420b5cc6e0615cde0b55 kernel.org
https://git.kernel.org/stable/c/5161e67c561c4f28a5d9335a6e859b02511de92b kernel.org
https://git.kernel.org/stable/c/588d4a6795d99d080f74ef0b5f391ea8c453ae5d kernel.org
https://git.kernel.org/stable/c/64d322c288577793eedd352b96ef75234ed380fe kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-74705
NVD Published Date:
Aug 22, 2026
NVD Last Modified:
Aug 25, 2026
Source:
kernel.org
CVE-2026-74705 Details - Not Deferred