CVE-2026-74603

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74603
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74603.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74603
Downstream
Published
2026-08-22T15:31:51.544Z
Modified
2026-08-27T11:30:38.002278972Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
ptp: ocp: Fix board ID over-read
Details

In the Linux kernel, the following vulnerability has been resolved:

ptp: ocp: Fix board ID over-read

The EEPROM board ID is a fixed 13-byte field and is not guaranteed to contain a NUL terminator. Passing it directly to devlinkinfoversionfixedput() treats it as a C string and may read beyond the field.

Format at most OCPBOARDID_LEN bytes into the existing local buffer before reporting the ID. Use a precision limit because the snprintf() output size alone does not bound the source string scan.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74603.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0cfcdd1ebcfe1a9b262f6ad8419580720dc843c4
Fixed
72ef3ce80078199bfad32f98d055f44ba7cd0c3d
Fixed
3d965811be78473654e6e8cc8e4fb7b6b87aa6c1
Fixed
f92558bbe78d6284fedd053900f82a70f0aa8707
Fixed
5fd91dd4a143479b0575fb1f202ec1c501e71fd5
Fixed
f8d7e5751267637190eff887c971d5b468106213
Fixed
6b69f2ef10cdb018c0b127a7cab88e590bbddba4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74603.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.183
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.152
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.104
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.45
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74603.json"