CVE-2026-74729: soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read

mediumCVSS 6.3CVE-2026-74729

CSIRTS triage

vendor: Aspeed product: soc lpc-snoop Memory corruption

What: The Aspeed LPC snoop snoop_file_read function has a usercopy buffer overflow.
Who is affected: Systems running affected Linux kernel versions with Aspeed SOC LPC snoop functionality.
Urgency: Medium severity (CVSS 6.3); not currently exploited but enables privilege escalation via usercopy overflow.
Action: Update to a patched Linux kernel version addressing CVE-2026-74729.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch soc lpc-snoop

Get an email when a new soc lpc-snoop advisory drops — max one per day, one-click unsubscribe.

Details

Source: Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity: medium — CVSS 6.3
Published: 2026-08-11
Exploitation: Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74729

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-747290.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-74729	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

unknownCVE-2026-74729: In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fi…nvd

Recent advisories for soc

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalA Tale of Two SOCs: Insights From Two Red Team Assessmentscisa · 2026-08-25
unknownCVE-2026-74729: In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fi…nvd · 2026-08-22
highCVE-2024-13942: Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case o…nvd · 2026-08-19
mediumCVE-2026-50720: The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word o…nvd · 2026-08-19
mediumCVE-2026-50719: The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacke…nvd · 2026-08-19
highCVE-2026-74333: In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy:…nvd · 2026-08-15