CVE-2026-74457

A flaw was found in the Linux kernel's peak_usb module. A malicious USB device could send a specially crafted payload, leading to a heap out-of-bounds read. This vulnerability can cause a kernel panic, resulting in a Denial of Service (DoS) for the affected system.

A flaw of moderate impact was found in the Linux kernel peak_usb driver, used for PEAK PCAN-USB CAN interface devices, which ships in the Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernels. In pcan_usb_pro_handle_canmsg() and pcan_usb_pro_handle_error(), the channel control index ctrl_idx is derived from a field of a USB payload received directly from the device and masked to values 0-15, while the usb_if->dev[] array holds only 2 entries. A malicious or faulty USB device sending a specially crafted payload can therefore supply a channel index between 2 and 15, causing a heap out-of-bounds read and an eventual kernel panic in the IRQ context, resulting in a denial of service of the affected system. The flaw is not network-reachable: exploiting it requires physical access to connect a crafted USB device, and the impact is limited to availability with no confidentiality or integrity impact. For these reasons Red Hat rates this flaw MODERATE (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Red Hat Enterprise Linux 6 is marked not affected because the vulnerable code is not present in that release. For the affected Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams, the fix is currently deferred; the residual risk is considered low because exploitation requires physical access to attach a malicious PEAK PCAN-USB device and results only in a system crash (denial of service).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.