CVE-2026-74580

🗓️ 21 Aug 2026 16:31:54Reported by LinuxType

Stale vring metadata cache in Linux kernel vhost causes out-of-bounds memory access.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2026-74580 vhost: reset the vring metadata cache on vring reconfiguration	21 Aug 202616:31	–	cvelist
Debian CVE	CVE-2026-74580	21 Aug 202616:31	–	debiancve
EUVD	EUVD-2026-64002	21 Aug 202616:31	–	euvd
NVD	CVE-2026-74580	21 Aug 202617:16	–	nvd
OSV	DEBIAN-CVE-2026-74580	21 Aug 202617:16	–	osv
Positive Technologies	PT-2026-79401	21 Aug 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-74580	21 Aug 202619:09	–	redhatcve

Vulners

CNA

Node

linux linux_kernelRange4.11–5.10.265

linux linux_kernelRange5.11.0–5.15.216

linux linux_kernelRange5.16.0–6.1.183

linux linux_kernelRange6.2.0–6.6.152

linux linux_kernelRange6.7.0–6.12.104

linux linux_kernelRange6.13.0–6.18.45

linux linux_kernelRange6.19.0–7.1.9

linux linux_kernelRange7.2.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/vhost/vhost.c"
    ],
    "versions": [
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "5224bd37e37d36076a550d99b2aebba33939fd95",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "54617e9119be2eb728ecdd8d977b99c99d4c498a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "13fa6f32a56a386a82bd7451644c494beed034af",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "cf363a7a02ce132ef1f58084fdb13e1a3b7da7e7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "6fa3e9b1fe856259555a7e22f3f3082e7827fd9b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "f1e21108e3ddfcce62f6cad4ebd7b5674543c9e6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "b70ebe0bba254e093dd5fd4c0c170941ce83eb85",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f889491380582b4ba2981cf0b0d7d6a40fb30ab7",
        "lessThan": "de845981da67a6b049080c87e605130b0c30adc5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/vhost/vhost.c"
    ],
    "versions": [
      {
        "version": "4.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.265",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.216",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.183",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.152",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.104",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.45",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.9",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/54617e9119be2eb728ecdd8d977b99c99d4c498a
git	www.git.kernel.org/stable/c/f1e21108e3ddfcce62f6cad4ebd7b5674543c9e6
git	www.git.kernel.org/stable/c/6fa3e9b1fe856259555a7e22f3f3082e7827fd9b
git	www.git.kernel.org/stable/c/13fa6f32a56a386a82bd7451644c494beed034af
git	www.git.kernel.org/stable/c/de845981da67a6b049080c87e605130b0c30adc5
git	www.git.kernel.org/stable/c/cf363a7a02ce132ef1f58084fdb13e1a3b7da7e7
git	www.git.kernel.org/stable/c/b70ebe0bba254e093dd5fd4c0c170941ce83eb85
git	www.git.kernel.org/stable/c/5224bd37e37d36076a550d99b2aebba33939fd95

21 Aug 2026 17:16Current

5.5Medium risk

Vulners AI Score5.5