CVE-2026-74457
In the Linux kernel, the following vulnerability has been resolved:
can: peak_usb: add bounds check for USB channel index
The channel control index ctrl_idx is derived from rx->len which comes
directly from a device USB payload. The mask 0x0f allows values 0-15, but
the array size of usb_if->dev[] is only 2. Values 2-15 cause heap
out-of-bounds read, eventually causing kernel panic in the IRQ context.
Add bounds checking for ctrl_idx before the array access in both
pcan_usb_pro_handle_canmsg() and pcan_usb_pro_handle_error().
CSIRTS triage
- What
- Missing bounds check for USB channel index in peak_usb driver allows out-of-bounds access.
- Who is affected
- Systems running affected Linux kernel versions with peak_usb CAN driver and USB devices with multiple channels.
- Urgency
- Moderate; out-of-bounds channel access can cause denial of service or memory corruption.
- Action
- Apply kernel patch adding channel index bounds check or update to patched kernel version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-74457
Get an email if CVE-2026-74457 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.
Advisory coverage (3)
- unknownDSA-6466-1 linux - security updatedebian · 2026-08-25
- unknownCVE-2026-74457: In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: add bounds …nvd · 2026-08-15
- mediumCVE-2026-74457: can: peak_usb: add bounds check for USB channel indexmsrc · 2026-08-11
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-74457)