CVE-2026-74693 PUBLISHED

net: prestera: validate firmware header length

Assigner: Linux
Reserved: 15.08.2026 Published: 22.08.2026 Updated: 22.08.2026

In the Linux kernel, the following vulnerability has been resolved:

net: prestera: validate firmware header length

prestera_fw_hdr_parse() reads the firmware header before checking that the firmware image contains that header.

Reject images shorter than struct prestera_fw_header before decoding the magic and version fields.

Vendor	Linux
Product	Linux
Versions	Default: unaffected affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 38a3afbf9fd8a2e8c47fa3ca47b425a8a9623240 (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 0fbcceb9d19f2d1dcdf099aee590f2517cb718bb (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to e0f382e8084117f0b11ffb070fe1079e38c0d7f9 (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 6fad06bb793d7089ae05b9fcf46e11be2dfe4850 (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 470ac9cce7308e60cf2dceb448749cdd006e73de (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 363e048a9d0a6c245cbc348c8a220170afed046a (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 7fa8a12296d8d5aa4b1c3904f0b354d81124cf29 (excl.) affected from 4c2703dfd7fabb0824b3bc345f9fa47e33248c14 to 8ae344eb540af3f457179b52bc6061416752485c (excl.)

Vendor	Linux
Product	Linux
Versions	Default: affected Version 5.10 is affected unaffected from 0 to 5.10 (excl.) unaffected from 5.10.265 to 5.10.* (incl.) unaffected from 5.15.216 to 5.15.* (incl.) unaffected from 6.1.183 to 6.1.* (incl.) unaffected from 6.6.152 to 6.6.* (incl.) unaffected from 6.12.104 to 6.12.* (incl.) unaffected from 6.18.45 to 6.18.* (incl.) unaffected from 7.1.9 to 7.1.* (incl.) unaffected from 7.2 to * (incl.)