Vulnerability · Published Aug 22, 2026 · Assigned by Linux

CVE-2026-74705udp: fix potential use-after-free in tunnel segmentation

Critical 10.0

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)0.5%top 57.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:10kernel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-abi-stablelists6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-abi-stablelists4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-abi-stablelists5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-core4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-cross-headers6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-cross-headers4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-cross-headers5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-debug4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-debug5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-debug-core4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-debug-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-debug-devel4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-debug-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-debug-modules4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-debug-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-debug-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-devel4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-devel-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-devel-matched5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-doc6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-doc4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-doc5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-headers6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-headers4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-headers5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-modules4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-modules-extra4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:10kernel-rt6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-core4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-debug4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-debug5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-debug-core4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-debug-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-devel4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-modules4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-rt-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.174.1.rt7.515.el8_10ALSA-2026:83159
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-tools6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-tools4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-tools5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-tools-libs6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-tools-libs4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-tools-libs5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-uki-virt6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-uki-virt5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-zfcpdump4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-zfcpdump5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10libperf6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9libperf5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10perf6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8perf4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9perf5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10python3-perf6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:8python3-perf4.18.0-553.174.1.el8_10ALSA-2026:83157
AlmaLinux:9python3-perf5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10rtla6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9rtla5.14.0-687.58.1.el9_8ALSA-2026:83156
AlmaLinux:10rv6.12.0-211.64.1.el10_2ALSA-2026:77690
AlmaLinux:9rv5.14.0-687.58.1.el9_8ALSA-2026:83156
Debian:12linux6.1.187-1DEBIAN-CVE-2026-74705
Debian:13linux6.12.105-1DEBIAN-CVE-2026-74705
Debian:14linux7.1.9-1DEBIAN-CVE-2026-74705
Debian:12linux-6.126.12.107-1~deb12u1DEBIAN-CVE-2026-74705
Rocky Linux:10kernel0:6.12.0-211.64.1.el10_2RLSA-2026:77690
Rocky Linux:8kernel0:4.18.0-553.174.1.el8_10RLSA-2026:83157
Rocky Linux:9kernel0:5.14.0-687.58.1.el9_8RLSA-2026:83156
Rocky Linux:8kernel-rt0:4.18.0-553.174.1.rt7.515.el8_10RLSA-2026:83159
Ubuntu:22.04:LTSlinux5.15.0-198.208UBUNTU-CVE-2026-74705
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-74705
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-74705
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-74705
Ubuntu:22.04:LTSlinux-aws5.15.0-1117.124UBUNTU-CVE-2026-74705
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-74705
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-74705
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-74705

Affected products (as reported)

VendorProductVersions
Linux Linux dbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 6a733a38b983d8c2e222f13968209010cf44de87dbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 19d89b13a43640b2da2f277ee462d919d988cb6fdbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before b3df61bb745eb5201eac22679a2839d4ccbf3442dbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 1ae134c012e10384cdac420b5cc6e0615cde0b55dbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 5161e67c561c4f28a5d9335a6e859b02511de92bdbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 64d322c288577793eedd352b96ef75234ed380fedbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before 588d4a6795d99d080f74ef0b5f391ea8c453ae5ddbef491ebe7f3a4fb1b9111878b86a426fd540b7 – before d0f86fb36eb260abd10007b62c9dcc1028e03e61
Linux Linux 4.6

References