CVE-2026-74705

CVE-2026-74705 is a use-after-free vulnerability in the Linux kernel UDP tunnel segmentation path. The function __skb_udp_tunnel_segment() obtains a pointer to the UDP header before ensuring the tunnel header resides in the skb head. If a subsequent pull operation reallocates skb->head, the pr...