CVE-2026-74705 (CVSS 10)

Description

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.

Is your site exposed to CVE-2026-74705?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0050

Probability of exploitation

0.42%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/19d89b13a43640b2da2f277ee462d919d988cb6f https://git.kernel.org/stable/c/1ae134c012e10384cdac420b5cc6e0615cde0b55 https://git.kernel.org/stable/c/5161e67c561c4f28a5d9335a6e859b02511de92b https://git.kernel.org/stable/c/588d4a6795d99d080f74ef0b5f391ea8c453ae5d https://git.kernel.org/stable/c/64d322c288577793eedd352b96ef75234ed380fe https://git.kernel.org/stable/c/6a733a38b983d8c2e222f13968209010cf44de87 https://git.kernel.org/stable/c/b3df61bb745eb5201eac22679a2839d4ccbf3442 https://git.kernel.org/stable/c/d0f86fb36eb260abd10007b62c9dcc1028e03e61

Frequently Asked Questions

What is CVE-2026-74705? +

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free. It has a CVSS v3.1 base score of 10.0 (CRITICAL).

How severe is CVE-2026-74705? +

CVE-2026-74705 has a CVSS v3.1 score of 10.0 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately. The EPSS score is 0.0050, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-74705? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-74705