CVE-2026-74263 net: wwan: t7xx: check skb_clone in control TX
A missing null check in the Linux kernel t7xx WWAN driver causes a crash when skb cloning fails, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74263?
CVE-2026-74263 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: check skb_clone in control TX
t7xx_port_ctrl_tx() clones each skb fragment before passing it to the port transmit path. The clone is used immediately to set cloned->len, so an skb_clone() failure results in a NULL pointer dereference.
Check the clone before using it. If previous fragments were already queued, preserve the driver's existing partial-write behavior by returning the number of bytes submitted so far.
Which versions are affected by CVE-2026-74263?
How do I fix CVE-2026-74263?
Apply the vendor's patch.
Is CVE-2026-74263 being exploited?
There is no known exploitation of CVE-2026-74263 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74263, DEBIAN-CVE-2026-74263, GHSA-j99c-mg6x-5mmp, UBUNTU-CVE-2026-74263.