CVE-2026-74365 (GCVE-0-2026-74365)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:58 – Updated: 2026-08-17 05:46
VLAI
Title
nvdimm/btt: Handle preemption in BTT lane acquisition
Summary
In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquisition BTT lanes serialize access to per-lane metadata and workspace state during BTT I/O. The btt-check unit test reports data mismatches during BTT writes due to a race in lane acquisition that can lead to silent data corruption. The existing lane model uses a spinlock together with a per-CPU recursion count. That recursion model stopped being valid after BTT lanes became preemptible: another task can run on the same CPU, observe a non-zero recursion count, bypass locking, and use the same lane concurrently. BTT lanes are also held across arena_write_bytes() calls. That path reaches nsio_rw_bytes(), which flushes writes with nvdimm_flush(). Some provider flush callbacks can sleep, making a spinlock the wrong primitive for the lane lifetime. Replace the spinlock-based recursion model with a dynamically allocated per-lane mutex array and take the lane lock unconditionally. Add might_sleep() to catch any future atomic-context caller. Found with the ndctl unit test btt-check.sh.
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f23859748e3d530217b197e146a9ac84faf0a282 , < fd7a97b2514cfc4b4cc067a27dd39bde2a8b1735 (git)
Affected: 6f50b414f1a0d790f11a6438a3ad6d0577eb2c18 , < 73e35c1bdfa160b41fdbe204e02325f0687de506 (git)
Affected: 36c75ce3bd299878fd9b238e9803d3817ddafbf3 , < 417918783bcfe0be135019df16a267b3af442efd (git)
Affected: 36c75ce3bd299878fd9b238e9803d3817ddafbf3 , < 5c53406098b599c420b031e6ec5ba8a2f3794c50 (git)
Affected: 36c75ce3bd299878fd9b238e9803d3817ddafbf3 , < 4eafa810b042d985ec6bbf5b514414e73cee6f6f (git)
Affected: 36c75ce3bd299878fd9b238e9803d3817ddafbf3 , < 8d4b989d9c9afe5f185aa5853b666fc4617afe9e (git)
Affected: 2577fece583c7c05cda7ad50dde7638c962665e1 (git)
Affected: 40ba3fa21250e361bdd8f00800b3e2cb6160de95 (git)
Affected: b0e7a935739f33ed2bd6868b89f97dd4c2683c26 (git)
Affected: 66eb7b7f23dd9aec5356e7054dd3596ae7648ff5 (git)
Affected: b27751fb1f271bbb78d5993c0b10011628e40e18 (git)
Affected: 6.1.63 , < 6.1.178 (semver)
Affected: 6.6.2 , < 6.6.145 (semver)
Affected: 4.19.299 , < 4.20 (semver)
Affected: 5.4.261 , < 5.5 (semver)
Affected: 5.10.201 , < 5.11 (semver)
Affected: 5.15.139 , < 5.16 (semver)
Affected: 6.5.12 , < 6.6 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.7
Unaffected: 0 , < 6.7 (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "Documentation/driver-api/nvdimm/btt.rst",
            "drivers/nvdimm/nd.h",
            "drivers/nvdimm/region_devs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd7a97b2514cfc4b4cc067a27dd39bde2a8b1735",
              "status": "affected",
              "version": "f23859748e3d530217b197e146a9ac84faf0a282",
              "versionType": "git"
            },
            {
              "lessThan": "73e35c1bdfa160b41fdbe204e02325f0687de506",
              "status": "affected",
              "version": "6f50b414f1a0d790f11a6438a3ad6d0577eb2c18",
              "versionType": "git"
            },
            {
              "lessThan": "417918783bcfe0be135019df16a267b3af442efd",
              "status": "affected",
              "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
              "versionType": "git"
            },
            {
              "lessThan": "5c53406098b599c420b031e6ec5ba8a2f3794c50",
              "status": "affected",
              "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
              "versionType": "git"
            },
            {
              "lessThan": "4eafa810b042d985ec6bbf5b514414e73cee6f6f",
              "status": "affected",
              "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
              "versionType": "git"
            },
            {
              "lessThan": "8d4b989d9c9afe5f185aa5853b666fc4617afe9e",
              "status": "affected",
              "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2577fece583c7c05cda7ad50dde7638c962665e1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "40ba3fa21250e361bdd8f00800b3e2cb6160de95",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b0e7a935739f33ed2bd6868b89f97dd4c2683c26",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "66eb7b7f23dd9aec5356e7054dd3596ae7648ff5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b27751fb1f271bbb78d5993c0b10011628e40e18",
              "versionType": "git"
            },
            {
              "lessThan": "6.1.178",
              "status": "affected",
              "version": "6.1.63",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6.145",
              "status": "affected",
              "version": "6.6.2",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.299",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.261",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.201",
              "versionType": "semver"
            },
            {
              "lessThan": "5.16",
              "status": "affected",
              "version": "5.15.139",
              "versionType": "semver"
            },
            {
              "lessThan": "6.6",
              "status": "affected",
              "version": "6.5.12",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "Documentation/driver-api/nvdimm/btt.rst",
            "drivers/nvdimm/nd.h",
            "drivers/nvdimm/region_devs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.7"
            },
            {
              "lessThan": "6.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "6.1.63",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "6.6.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.299",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.261",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.201",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.15.139",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvdimm/btt: Handle preemption in BTT lane acquisition\n\nBTT lanes serialize access to per-lane metadata and workspace state\nduring BTT I/O. The btt-check unit test reports data mismatches during\nBTT writes due to a race in lane acquisition that can lead to silent\ndata corruption.\n\nThe existing lane model uses a spinlock together with a per-CPU\nrecursion count. That recursion model stopped being valid after BTT\nlanes became preemptible: another task can run on the same CPU,\nobserve a non-zero recursion count, bypass locking, and use the same\nlane concurrently.\n\nBTT lanes are also held across arena_write_bytes() calls. That path\nreaches nsio_rw_bytes(), which flushes writes with nvdimm_flush().\nSome provider flush callbacks can sleep, making a spinlock the wrong\nprimitive for the lane lifetime.\n\nReplace the spinlock-based recursion model with a dynamically\nallocated per-lane mutex array and take the lane lock\nunconditionally.\n\nAdd might_sleep() to catch any future atomic-context caller.\n\nFound with the ndctl unit test btt-check.sh."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The flaw is reached only through local block I/O on a BTT-backed /dev/pmem* device via vfs_write/pwrite/O_DIRECT paths into btt_submit_bio-\u003ebtt_write_pg/btt_read_pg-\u003end_region_acquire_lane; it is not in a network protocol handler.\nAC:L - After BTT lanes became preemptible, a second task on the same CPU can bypass the per-CPU recursion spinlock while the first still holds the lane across sleeping arena_write_bytes/nvdimm_flush; an attacker reliably wins by issuing concurrent writes (e.g., many threads) to the BTT block device.\nPR:L - No capability checks exist on the bio submission path; any local principal with write access to the BTT block device or a filesystem mounted on it (common for database/service accounts on PMEM servers) can trigger the race without real init-namespace root.\nUI:N - Exploitation requires only automated concurrent block writes from the attacker-controlled process and does not depend on any victim user opening files, clicking prompts, or performing other interactive actions.\nS:U - Impact is confined to corrupting BTT metadata and data within the attacker\u0027s reachable persistent-memory namespace on the same host; it does not cross VM, container, or IOMMU security boundaries to affect other security authorities.\nC:H - Unserialized lane use corrupts BTT map/log/freelist and in-memory arena-\u003ertt/freelist state, so reads can return stale or mis-mapped sector contents (cross-LBA disclosure); the ndctl btt-check test observed data mismatches confirming readable integrity loss.\nI:H - Concurrent writers can silently corrupt on-media BTT translation tables and user data blocks, producing arbitrary persistent storage modification rather than a bounded or detectable single-field change, matching the fix commit\u0027s silent data-corruption description.\nA:L - The primary failure mode is silent corruption and subsequent I/O errors on the affected namespace rather than a kernel panic or hang, but corrupted BTT metadata can persistently degrade or deny reliable access to the volume until recovery or rebuild."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:46:24.251Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd7a97b2514cfc4b4cc067a27dd39bde2a8b1735"
        },
        {
          "url": "https://git.kernel.org/stable/c/73e35c1bdfa160b41fdbe204e02325f0687de506"
        },
        {
          "url": "https://git.kernel.org/stable/c/417918783bcfe0be135019df16a267b3af442efd"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c53406098b599c420b031e6ec5ba8a2f3794c50"
        },
        {
          "url": "https://git.kernel.org/stable/c/4eafa810b042d985ec6bbf5b514414e73cee6f6f"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d4b989d9c9afe5f185aa5853b666fc4617afe9e"
        }
      ],
      "title": "nvdimm/btt: Handle preemption in BTT lane acquisition",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-74365",
    "datePublished": "2026-08-15T05:58:47.594Z",
    "dateReserved": "2026-08-15T05:44:03.888Z",
    "dateUpdated": "2026-08-17T05:46:24.251Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-74365",
      "date": "2026-09-24",
      "epss": "0.0018",
      "percentile": "0.06661"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "Documentation/driver-api/nvdimm/btt.rst",
                  "drivers/nvdimm/nd.h",
                  "drivers/nvdimm/region_devs.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "fd7a97b2514cfc4b4cc067a27dd39bde2a8b1735",
                    "status": "affected",
                    "version": "f23859748e3d530217b197e146a9ac84faf0a282",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "73e35c1bdfa160b41fdbe204e02325f0687de506",
                    "status": "affected",
                    "version": "6f50b414f1a0d790f11a6438a3ad6d0577eb2c18",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "417918783bcfe0be135019df16a267b3af442efd",
                    "status": "affected",
                    "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5c53406098b599c420b031e6ec5ba8a2f3794c50",
                    "status": "affected",
                    "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4eafa810b042d985ec6bbf5b514414e73cee6f6f",
                    "status": "affected",
                    "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8d4b989d9c9afe5f185aa5853b666fc4617afe9e",
                    "status": "affected",
                    "version": "36c75ce3bd299878fd9b238e9803d3817ddafbf3",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "2577fece583c7c05cda7ad50dde7638c962665e1",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "40ba3fa21250e361bdd8f00800b3e2cb6160de95",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "b0e7a935739f33ed2bd6868b89f97dd4c2683c26",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "66eb7b7f23dd9aec5356e7054dd3596ae7648ff5",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "b27751fb1f271bbb78d5993c0b10011628e40e18",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.1.178",
                    "status": "affected",
                    "version": "6.1.63",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6.145",
                    "status": "affected",
                    "version": "6.6.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.20",
                    "status": "affected",
                    "version": "4.19.299",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "affected",
                    "version": "5.4.261",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.11",
                    "status": "affected",
                    "version": "5.10.201",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.16",
                    "status": "affected",
                    "version": "5.15.139",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.6",
                    "status": "affected",
                    "version": "6.5.12",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "Documentation/driver-api/nvdimm/btt.rst",
                  "drivers/nvdimm/nd.h",
                  "drivers/nvdimm/region_devs.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.7"
                  },
                  {
                    "lessThan": "6.7",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.178",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.145",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.97",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.40",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.1.*",
                    "status": "unaffected",
                    "version": "7.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvdimm/btt: Handle preemption in BTT lane acquisition\n\nBTT lanes serialize access to per-lane metadata and workspace state\nduring BTT I/O. The btt-check unit test reports data mismatches during\nBTT writes due to a race in lane acquisition that can lead to silent\ndata corruption.\n\nThe existing lane model uses a spinlock together with a per-CPU\nrecursion count. That recursion model stopped being valid after BTT\nlanes became preemptible: another task can run on the same CPU,\nobserve a non-zero recursion count, bypass locking, and use the same\nlane concurrently.\n\nBTT lanes are also held across arena_write_bytes() calls. That path\nreaches nsio_rw_bytes(), which flushes writes with nvdimm_flush().\nSome provider flush callbacks can sleep, making a spinlock the wrong\nprimitive for the lane lifetime.\n\nReplace the spinlock-based recursion model with a dynamically\nallocated per-lane mutex array and take the lane lock\nunconditionally.\n\nAdd might_sleep() to catch any future atomic-context caller.\n\nFound with the ndctl unit test btt-check.sh."
          }
        ],
        "id": "CVE-2026-74365",
        "lastModified": "2026-08-17T06:19:31.297",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.5,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-08-15T06:22:38.143",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/417918783bcfe0be135019df16a267b3af442efd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/4eafa810b042d985ec6bbf5b514414e73cee6f6f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/5c53406098b599c420b031e6ec5ba8a2f3794c50"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/73e35c1bdfa160b41fdbe204e02325f0687de506"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8d4b989d9c9afe5f185aa5853b666fc4617afe9e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/fd7a97b2514cfc4b4cc067a27dd39bde2a8b1735"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-20T20:53:20+00:00",
      "cve": "CVE-2026-74365",
      "id": "CVE-2026-74365",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: nvdimm/btt: Handle preemption in BTT lane acquisition",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74365.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-03T00:06:52Z",
      "cve": "CVE-2026-74365",
      "id": "CVE-2026-74365",
      "initial_release_date": "2026-09-03T00:06:52Z",
      "product_status:known_affected": "165",
      "product_status:known_not_affected": "197",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-74365",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-74365.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.