CVE-2026-74702 | Linux Kernel up to 6.18.44/7.1.8 vhost-scsi allocation of resources

A vulnerability was found in Linux Kernel up to 6.18.44/7.1.8. It has been declared as problematic. Affected is the function vhost_scsi_setup_vq_cmds/vhost_scsi_set_features/vhost_scsi_mapal/sg_alloc_table_chained/sg_pool_index of the component vhost-scsi. The manipulation results in allocation of resources.

This vulnerability is known as CVE-2026-74702. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More