Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel before 6.6.152.1-1 can free memory incorrectly
published 2 months ago
Summary
Versions of the Linux kernel older than 6.6.152.1-1 may mishandle UDP tunnel processing, causing the system to release memory that is still in use. This can lead to crashes or allow an attacker to take control of the server. Upgrade the kernel to the latest version or apply the vendor's patch as soon as possible.
What to do
- Update kernel to version 6.6.152.1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
< 6.6.152.1-1 Fix: upgrade to 6.6.152.1-1
|
Original advisory text
CVE-2026-74705 affecting package kernel for versions less than 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved:
udp: fix potential use-after-free in tunnel segmentation
__skb_udp_tunnel_segment() gets the UDP header before ensuring the
tunnel header is in the skb head. If the pull reallocates skb->head,
the saved UDP header pointer is no longer valid.
Get the UDP header after the pull to avoid a potential use-after-free.
udp: fix potential use-after-free in tunnel segmentation
__skb_udp_tunnel_segment() gets the UDP header before ensuring the
tunnel header is in the skb head. If the pull reallocates skb->head,
the saved UDP header pointer is no longer valid.
Get the UDP header after the pull to avoid a potential use-after-free.
References
Timeline
Published22 Aug 2026
Updated2 Oct 2026
First seen23 Sep 2026
Sources
AZL-97182 · OSV
Track software like this
Free during beta