CVE-2026-74582

An out-of-bounds write problem was observed in packet_sendmsg_spkt in net/packet/af_packet.c in the Linux Kernel. In this flaw, AF_PACKET hard_header_len race may allow local privilege escalation.

This vulnerability is rated as an Important impact because successful exploitation allows a local user to induce kernel memory corruption, potentially leading to local privilege escalation or a complete kernel crash. Triggering the race condition requires sending raw packet data while concurrently reconfiguring a network device, which typically requires network administrative capabilities or access to unprivileged user namespaces. Because the flaw can result in arbitrary kernel write operations from local space, it is assessed at a higher severity despite the race window and capability prerequisites.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.