CVE-2026-74739 evidence review
Linux
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_class() u32_walk() enumerates both struct tc_u_hnode and struct tc_u_knode through the walker callback. u32_bind_class() unconditionally casts the passed fh to tc_u_knode and accesses &n->res, so when fh is actually a tc_u_hnode, which has no tcf_result member, this results in a slab-out-of-bounds read of res->classid in tc_cls_bind_class(). The issue can be reproduced with the following commands: tc qdisc add dev lo root handle 1: hfsc tc class add dev lo parent 1: classid 1...
This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.
Identify the product and installed version
Record whether Linux is present, where it is installed, and which interfaces are exposed.
- Record the product name, package or appliance identifier, and installed version.
- Identify internet-facing, administrative, API, and internal access paths.
- Preserve the pre-change configuration and relevant service logs.
Compare the affected range
Use the current record as an identification aid: >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < ec5f3005586a785689fd568361b0c5925cb1548b, >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < 19d114b93c94bdef70496f26685c2a6b242f41b3, >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < 594a064d603202b9ee21e07679d854e5c1750cc4, >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < 31f26a95eeee926946809ac456c61a3217936a62, >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < e71f8e9ed6f311410b14741f6012afe01869c0fa, >= 07d79fc7d94e3f884b8b1c95aa615b202bb5e4c1 < 6d3724e616faf952c3adcf8414fc21a828ef3709, >= 4.14. Resolve incomplete inventory results before deciding that an asset is unaffected.
Verify the authoritative remediation source
Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.
Operational boundary
This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.