Skip to main content

Linux Kernel CVE-2026-74467

| EUVDEUVD-2026-59660 HIGH
2026-08-15 Linux GHSA-gc56-w4qv-mcc4
Information Disclosure Linux Red Hat Suse
7.8
CVSS 3.1 · Vendor: Linux
Share

Severity by source

Vendor (Linux) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.3 HIGH

Local access and low privilege confirmed by ioctl context; A:L rather than A:H because practical availability disruption via SNMP reconfiguration is uncertain without further evidence.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
SUSE
HIGH
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 17, 2026 - 11:36 vuln.today
CVSS changed
Aug 17, 2026 - 06:22 NVD
7.8 (HIGH)
Patch available
Aug 15, 2026 - 13:04 EUVD
CVE Published
Aug 15, 2026 - 12:27 cve.org
HIGH 7.8
CVE Published
Aug 15, 2026 - 12:27 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

s390/qeth: Check CAP_NET_ADMIN for private ioctls

Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN capable check to ensure unprivileged users cannot invoke them.

AnalysisAI

Privilege escalation in the Linux kernel's s390/qeth network driver allows any local unprivileged user to invoke three network management ioctls - SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE, and SIOC_QETH_QUERY_OAT - without the CAP_NET_ADMIN capability check that should gate them. Affected deployments are exclusively IBM z Systems (s390) mainframe environments running Linux kernels from commit 18787eeebd7 through the respective stable fix points, limiting real-world exposure to a narrow architectural niche. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain local user account on s390 Linux host
Delivery
Open raw or UDP socket
Exploit
Target qeth network interface by device name
Execution
Issue SIOCDEVPRIVATE ioctl (QUERY_OAT or SET_SNMP_CONTROL) without CAP_NET_ADMIN
Impact
Read sensitive adapter traffic data or reconfigure SNMP control
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires local shell or interactive access to a Linux system running on IBM s390 (z Systems) mainframe hardware with an active qeth network interface - the qeth driver is s390-architecture-specific and is entirely absent on x86, ARM, or any other architecture. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The NVD CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scoring 7.8 is technically defensible - a low-privilege local user can directly invoke privileged network management operations with no interaction required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario A local unprivileged user on an IBM z Systems server running an unpatched kernel opens a raw socket, targets a qeth network interface by name, and issues SIOC_QETH_QUERY_OAT via ioctl to retrieve OSA-Express Adapter Traffic data - network-layer telemetry that should require administrative capability. Separately, the same user calls SIOC_QETH_ADP_SET_SNMP_CONTROL to reconfigure the adapter's SNMP agent, potentially redirecting SNMP traps or disabling monitoring without any audit trail reflecting administrative intent. …
Remediation Upgrade to a patched stable kernel release per your active branch: Linux 6.6.x to 6.6.151 or later, Linux 6.12.x to 6.12.103 or later, Linux 6.18.x to 6.18.44 or later, and Linux 7.1.x to 7.1.8 or later; the fix is also present in 7.2-rc6. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify and inventory all IBM z Systems running Linux with the affected s390/qeth driver (kernel commits 18787eeebd7 through respective stable fix points). …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Affected

Share

CVE-2026-74467 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy