CVE-2026-74725
CVE CVE-2026-74725EUVD EUVD-2026-64412Published 2026-08-22T15:33:16.000ZLast changed 2026-08-25T05:42:05.000ZCVSS 7.8
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: enic: fix tx_hang_reset use-after-free on device removal enic_remove() cancels the reset and change_mtu_work items but does not cancel tx_hang_reset. A TX timeout that fires while the device is being removed can schedule enic_tx_hang_reset() so that it runs after free_netdev(), resulting in a use-after-free. cancel_work_sync() alone is not sufficient here: the still-live watchdog and notify paths can re-schedule these work items in the window between the cancel and unregister_netdev(). Use disable_work_sync(), which cancels the work and blocks any subsequent schedule_work() from requeuing it, and apply it to the reset and change_mtu_work items as well so the same requeue race is closed for all teardown work.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 937317c7c1097aa878a5000e3aab616eb5c590c0 <ec680ea4ba1bca92a767fb7e7869758bfdd886e3; patch: 0; patch: 6.18.45; 937317c7c1097aa878a5000e3aab616eb5c590c0 <8619865f34fb3b130b567855382a5c4aadd522b9; 4.4; 937317c7c1097aa878a5000e3aab616eb5c590c0 <4f3464fc6c1f26afc504fd525c574f2bc14c9d42; patch: 7.2; patch: 6.12.104; 937317c7c1097aa878a5000e3aab616eb5c590c0 <e506e704b74748ffd0e1c92a7453ca2a959f832b; patch: 7.1.9
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.