CVE-2026-74603 (CVSS 7.1)

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlink_info_version_fixed_put() treats it as a C string and may read beyond the field. Format at most OCP_BOARD_ID_LEN bytes into the existing local buffer before reporting the ID. Use a precision limit because the snprintf() output size alone does not bound the source string scan.

Is your site exposed to CVE-2026-74603?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.1

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploit Prediction

0.0013

Probability of exploitation

0.03%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3d965811be78473654e6e8cc8e4fb7b6b87aa6c1 https://git.kernel.org/stable/c/5fd91dd4a143479b0575fb1f202ec1c501e71fd5 https://git.kernel.org/stable/c/6b69f2ef10cdb018c0b127a7cab88e590bbddba4 https://git.kernel.org/stable/c/72ef3ce80078199bfad32f98d055f44ba7cd0c3d https://git.kernel.org/stable/c/f8d7e5751267637190eff887c971d5b468106213 https://git.kernel.org/stable/c/f92558bbe78d6284fedd053900f82a70f0aa8707

Frequently Asked Questions

What is CVE-2026-74603? +

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlink_info_version_fixed_put() treats it as a C string and may read beyond the field. Format at most OCP_BOARD_ID_LEN bytes into the existing local buffer before reporting the ID. Use a precision limit because the snprintf() output size alone does not bound the source string scan. It has a CVSS v3.1 base score of 7.1 (HIGH).

How severe is CVE-2026-74603? +

CVE-2026-74603 has a CVSS v3.1 score of 7.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0013, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-74603? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-74603