CVE-2026-74527

HIGH 8.8 ALL-YEARS

Published 2026-08-15 · Last modified 2026-10-21 · Linux · NVD: Received

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

ELEVATED IMPACT

Severe if exploited (CVSS 8.8), but no confirmed exploitation. Patch on a normal cadence.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 7th percentile

○ In CISA KEV○ Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

8.8CVSS 3.1 · HIGH · CNA

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

What an attacker needs

⚠Access: Requires local access to the host
⚠Privileges: Requires a low-privilege account
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Linux

Products Linux

Weakness (CWE)

Not classified.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References and research data (JSON)

Vendor product assessments

Showing 32 of 274 vendor product statements; 242 omitted. Read the full vendor advisory.

kernel as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-64k-modules as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-64k-modules
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-debug-uki-virt
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-64k-debug-devel as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-debug-devel
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-debug-kvm
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-uki-virt
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
python3-perf as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/python3-perf
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-64k-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-64k-debug-modules-core
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-cross-headers as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-cross-headers
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-devel as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-devel
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-64k-core as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-core
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-64k-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-64k-devel-matched
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-debug-kvm
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-rt-modules-partner
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-zfcpdump-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/kernel-zfcpdump-devel-matched
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
rv as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/rv
- none available: Fix deferred
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-doc as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-doc
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
perf as a component of Red Hat Enterprise Linux 6 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/perf
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-debug as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-kdump-devel as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-kdump-devel
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-doc as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-doc
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-tools as a component of Red Hat Enterprise Linux 7 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-tools
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
bpftool as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/bpftool
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-cross-headers as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-cross-headers
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-debug-modules-internal
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-modules-extra as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-modules-extra
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-debug-devel
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-rt-kvm as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-rt-kvm
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-selftests-internal as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-selftests-internal
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
python3-perf as a component of Red Hat Enterprise Linux 8 · known not affected

Vendor assessment for this product only.
Reason: vulnerable code not present

pkg:rpm/redhat/python3-perf
Red Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00

All CVSS metrics

HIGH 8.8 v3.1 · CNA Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
HIGH 8.8 v3.1 · NVD Secondary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

Advisories

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74527.json vendor-advisoryRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59720 ADVISORYEUVD · EUVD-2026-59720

Technical & other

https://git.kernel.org/stable/c/1106b26e86ac1e7e4d1f634bcd532c5d44e60620CVE record · Linux · Updated 2026-10-21T12:45:46.154Z
NVD · CVE-2026-74527 · Updated 2026-10-21T13:19:45.470
https://git.kernel.org/stable/c/7e888d7dd11519330ba6c6a28391d55891463a6aCVE record · Linux · Updated 2026-10-21T12:45:46.154Z
NVD · CVE-2026-74527 · Updated 2026-10-21T13:19:45.470
https://git.kernel.org/stable/c/a76243488740a07c81c9adf431685bb7f7c31d8cCVE record · Linux · Updated 2026-10-21T12:45:46.154Z
NVD · CVE-2026-74527 · Updated 2026-10-21T13:19:45.470
https://git.kernel.org/stable/c/d3c6b0f48f126a36955b3fb4154a59d0b3621d97CVE record · Linux · Updated 2026-10-21T12:45:46.154Z
NVD · CVE-2026-74527 · Updated 2026-10-21T13:19:45.470
https://git.kernel.org/stable/c/3bd438a58e910db5dc369aa25dfed1fc95f1b596CVE record · Linux · Updated 2026-10-21T12:45:46.154Z
NVD · CVE-2026-74527 · Updated 2026-10-21T13:19:45.470
https://access.redhat.com/security/cve/CVE-2026-74527 vendor-referenceRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
https://bugzilla.redhat.com/show_bug.cgi?id=2517028 vendor-referenceRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
https://www.cve.org/CVERecord?id=CVE-2026-74527 vendor-referenceRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
https://nvd.nist.gov/vuln/detail/CVE-2026-74527 vendor-referenceRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00
https://lore.kernel.org/linux-cve-announce/2026081546-CVE-2026-74527-3439@gregkh/T vendor-referenceRed Hat · CVE-2026-74527 · Updated 2026-08-20T20:54:04+00:00

Sources: NVD · CVE.org · All sources and attribution · EPSS