UnratedFix available
net: prestera: validate firmware header length
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.265, 5.15.216, 6.1.183, 6.12.104, 6.18.45, 6.6.152, 7.1.9
- CVEs
- CVE-2026-74693
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 23:56 UTC · Revision 1
Source evidence
net: prestera: validate firmware header length
core-osv · Original sourcePublished 22 Aug 2026, 15:32 UTC
In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.
osv:CVE-2026-74693
Kernel
Fixed versions: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9
Complete source record
{
"id": "e2822e95849368ff8d92fe630c3602788043568ff2efefaafde9dd4428ec33f8",
"url": "https://osv.dev/vulnerability/CVE-2026-74693",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "net: prestera: validate firmware header length",
"summary": "In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.",
"evidence": "osv:CVE-2026-74693",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.265",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.216",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.183",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.152",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.104",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.45",
"evidence": "/affected/1/ranges"
},
{
"value": "7.1.9",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-74693",
"aliases": [
"CVE-2026-74693"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4c2703dfd7fabb0824b3bc345f9fa47e33248c14"
},
{
"fixed": "38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240"
},
{
"fixed": "0fbcceb9d19f2d1dcdf099aee590f2517cb718bb"
},
{
"fixed": "e0f382e8084117f0b11ffb070fe1079e38c0d7f9"
},
{
"fixed": "6fad06bb793d7089ae05b9fcf46e11be2dfe4850"
},
{
"fixed": "470ac9cce7308e60cf2dceb448749cdd006e73de"
},
{
"fixed": "363e048a9d0a6c245cbc348c8a220170afed046a"
},
{
"fixed": "7fa8a12296d8d5aa4b1c3904f0b354d81124cf29"
},
{
"fixed": "8ae344eb540af3f457179b52bc6061416752485c"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74693.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.10.0"
},
{
"fixed": "5.10.265"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.216"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.183"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.152"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.104"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.45"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.1.9"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74693.json"
}
}
],
"modified": "2026-10-28T02:30:32.704183028Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0fbcceb9d19f2d1dcdf099aee590f2517cb718bb",
"https://git.kernel.org/stable/c/363e048a9d0a6c245cbc348c8a220170afed046a",
"https://git.kernel.org/stable/c/38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240",
"https://git.kernel.org/stable/c/470ac9cce7308e60cf2dceb448749cdd006e73de",
"https://git.kernel.org/stable/c/6fad06bb793d7089ae05b9fcf46e11be2dfe4850",
"https://git.kernel.org/stable/c/7fa8a12296d8d5aa4b1c3904f0b354d81124cf29",
"https://git.kernel.org/stable/c/8ae344eb540af3f457179b52bc6061416752485c",
"https://git.kernel.org/stable/c/e0f382e8084117f0b11ffb070fe1079e38c0d7f9",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74693.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74693",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74693.json"
}
},
"related_cves": [
{
"value": "CVE-2026-74693",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 499300,
"published_at": "2026-08-22T15:32:56.491+00:00"
}