{"schema":"vulnpedia.research/1","cve":"CVE-2026-74574","references":[{"url":"https://git.kernel.org/stable/c/778ccbded2c8749c5be7f0dfa04fc9977a36fb7e","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","url":"https://git.kernel.org/stable/c/778ccbded2c8749c5be7f0dfa04fc9977a36fb7e"},{"source":"nvd","sourceId":"CVE-2026-74574","modified":"2026-10-16T20:17:38.923","url":"https://git.kernel.org/stable/c/778ccbded2c8749c5be7f0dfa04fc9977a36fb7e"}]},{"url":"https://git.kernel.org/stable/c/8d5d28285728be47c82fdf1c48be4268293c90e7","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","url":"https://git.kernel.org/stable/c/8d5d28285728be47c82fdf1c48be4268293c90e7"},{"source":"nvd","sourceId":"CVE-2026-74574","modified":"2026-10-16T20:17:38.923","url":"https://git.kernel.org/stable/c/8d5d28285728be47c82fdf1c48be4268293c90e7"}]},{"url":"https://git.kernel.org/stable/c/0679c0c189d2548f00e1bac95be28e2df5c6c7f7","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","url":"https://git.kernel.org/stable/c/0679c0c189d2548f00e1bac95be28e2df5c6c7f7"},{"source":"nvd","sourceId":"CVE-2026-74574","modified":"2026-10-16T20:17:38.923","url":"https://git.kernel.org/stable/c/0679c0c189d2548f00e1bac95be28e2df5c6c7f7"}]},{"url":"https://git.kernel.org/stable/c/6e26a41c4c1a706edaaa7c7dffc6b3b945707a55","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","url":"https://git.kernel.org/stable/c/6e26a41c4c1a706edaaa7c7dffc6b3b945707a55"},{"source":"nvd","sourceId":"CVE-2026-74574","modified":"2026-10-16T20:17:38.923","url":"https://git.kernel.org/stable/c/6e26a41c4c1a706edaaa7c7dffc6b3b945707a55"}]},{"url":"https://git.kernel.org/stable/c/ee1d7274102285d78a53161fc705a8d8cd40b066","tags":[],"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","origins":[{"source":"mitre","sourceId":"Linux","modified":"2026-08-17T05:48:53.873Z","url":"https://git.kernel.org/stable/c/ee1d7274102285d78a53161fc705a8d8cd40b066"},{"source":"nvd","sourceId":"CVE-2026-74574","modified":"2026-10-16T20:17:38.923","url":"https://git.kernel.org/stable/c/ee1d7274102285d78a53161fc705a8d8cd40b066"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-74574","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-74574"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516974","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2516974"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74574","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-74574"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74574","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74574"}]},{"url":"https://lore.kernel.org/linux-cve-announce/2026081555-CVE-2026-74574-9259@gregkh/T","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://lore.kernel.org/linux-cve-announce/2026081555-CVE-2026-74574-9259@gregkh/T"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:83207","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://access.redhat.com/errata/RHSA-2026:83207"}]},{"source":"euvd","sourceId":"EUVD-2026-59639","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59639","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-59639","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-59639"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"10Base-SMTV:kernel-modules-internal-0:6.12.0-211.66.1.el10_2.x86_64","product":"kernel-modules-internal-0:6.12.0-211.66.1.el10_2.x86_64 as a component of 10Base-SMTV","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-modules-internal@6.12.0-211.66.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"AppStream-10.2.Z:kernel-devel-matched-0:6.12.0-211.66.1.el10_2.ppc64le","product":"kernel-devel-matched-0:6.12.0-211.66.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-devel-matched@6.12.0-211.66.1.el10_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"AppStream-10.2.Z:python3-perf-0:6.12.0-211.66.1.el10_2.x86_64","product":"python3-perf-0:6.12.0-211.66.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/python3-perf@6.12.0-211.66.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"BaseOS-10.2.Z:kernel-core-0:6.12.0-211.66.1.el10_2.ppc64le","product":"kernel-core-0:6.12.0-211.66.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-core@6.12.0-211.66.1.el10_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"BaseOS-10.2.Z:kernel-debuginfo-common-aarch64-0:6.12.0-211.66.1.el10_2.aarch64","product":"kernel-debuginfo-common-aarch64-0:6.12.0-211.66.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-debuginfo-common-aarch64@6.12.0-211.66.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"BaseOS-10.2.Z:kernel-tools-debuginfo-0:6.12.0-211.66.1.el10_2.s390x","product":"kernel-tools-debuginfo-0:6.12.0-211.66.1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-tools-debuginfo@6.12.0-211.66.1.el10_2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"CRB-10.2.Z:kernel-debug-debuginfo-0:6.12.0-211.66.1.el10_2.s390x","product":"kernel-debug-debuginfo-0:6.12.0-211.66.1.el10_2.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-debug-debuginfo@6.12.0-211.66.1.el10_2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"CRB-10.2.Z:perf-debuginfo-0:6.12.0-211.66.1.el10_2.aarch64","product":"perf-debuginfo-0:6.12.0-211.66.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/perf-debuginfo@6.12.0-211.66.1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"NFV-10.2.Z:kernel-rt-modules-0:6.12.0-211.66.1.el10_2.x86_64","product":"kernel-rt-modules-0:6.12.0-211.66.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-rt-modules@6.12.0-211.66.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"RT-10.2.Z:kernel-rt-core-0:6.12.0-211.66.1.el10_2.x86_64","product":"kernel-rt-core-0:6.12.0-211.66.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/kernel-rt-core@6.12.0-211.66.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"RT-10.2.Z:python3-perf-debuginfo-0:6.12.0-211.66.1.el10_2.x86_64","product":"python3-perf-debuginfo-0:6.12.0-211.66.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.\n\nRed Hat recommends treating all kernel errata as security-relevant. Given the kernel's fundamental role, any bug has a higher chance of impacting system security, even if that impact only becomes clear after a fix is published. Therefore, Red Hat prioritizes delivering fixes that improve our customers' overall security posture.\n\nBecause of this proactive approach, a patch may be associated with a CVE assignment at a future date. Retroactive CVE assignments are always documented in the corresponding errata and on Red Hat's CVE pages. We strongly advise against delaying updates, as doing so may leave your system exposed when protections are already available.","url":"https://access.redhat.com/errata/RHSA-2026:83207"},{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."}],"purl":"pkg:rpm/redhat/python3-perf-debuginfo@6.12.0-211.66.1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:bpftool","product":"bpftool as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bpftool","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-64k-debug-modules-internal","product":"kernel-64k-debug-modules-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-64k-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-core","product":"kernel-core as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-core","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-debug-uki-virt","product":"kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-debug-uki-virt","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-modules-partner","product":"kernel-modules-partner as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-modules-partner","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-debug-modules-extra","product":"kernel-rt-64k-debug-modules-extra as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-debug-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-rt-64k-modules-partner","product":"kernel-rt-64k-modules-partner as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-64k-modules-partner","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-rt-debug-modules-partner","product":"kernel-rt-debug-modules-partner as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-rt-debug-modules-partner","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-selftests-internal","product":"kernel-selftests-internal as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-selftests-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:kernel-zfcpdump-modules","product":"kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/kernel-zfcpdump-modules","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_9:rv","product":"rv as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"The vulnerability resides in the `idxd` kernel module. If the Intel Data Streaming Accelerator (DSA) functionality is not actively used or required, the `idxd` module can be prevented from loading to mitigate this issue.\n\nTo blacklist the module:\n1. Create a new file `/etc/modprobe.d/blacklist-idxd.conf` with the following content:\n   ```\n   blacklist idxd\n   ```\n2. Regenerate the initramfs to ensure the blacklist takes effect on boot:\n   ```bash\n   sudo dracut -f -v\n   ```\n   or for systems using `mkinitrd`:\n   ```bash\n   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)\n   ```\n3. Reboot the system for the changes to take effect.\n\nThis mitigation may impact functionality that relies on the Intel Data Streaming Accelerator. If `idxd` functionality is required, this mitigation is not applicable."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/rv","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_6:kernel","product":"kernel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_6:kernel-kdump-devel","product":"kernel-kdump-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-kdump-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_7:kernel-devel","product":"kernel-devel as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_7:kernel-rt-doc","product":"kernel-rt-doc as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_7:perf","product":"perf as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/perf","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_8:kernel-debug-core","product":"kernel-debug-core as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-debug-core","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_8:kernel-modules-extra","product":"kernel-modules-extra as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-modules-extra","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_8:kernel-rt-debug-modules-internal","product":"kernel-rt-debug-modules-internal as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-rt-debug-modules-internal","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_8:kernel-tools-libs","product":"kernel-tools-libs as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/kernel-tools-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]},{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json","productId":"red_hat_enterprise_linux_8:python3-perf","product":"python3-perf as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python3-perf","origins":[{"source":"redhat","sourceId":"CVE-2026-74574","modified":"2026-10-15T05:24:53+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74574.json"}]}],"vendorCoverage":{"total":518,"shown":32,"omitted":486,"source":"redhat"}}