CVE-2026-74459: In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX
infovulnerability
security
Summary
A vulnerability in the Linux kernel's CAN (controller area network, a protocol for vehicle communication) driver allows memory to leak when a USB device fails to resubmit a data buffer. The code was skipping the proper cleanup path when an error occurred, leaving allocated memory unreleased.
Solution / Mitigation
Reuse the existing free_urb path after a resubmit failure so that the RX coherent buffer is freed before leaving the callback.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
August 15, 2026
Classification
Attack SophisticationModerate
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-74459
First tracked: August 15, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%