{"apiVersion":"1.0","identifier":"CVE-2026-74286","description":"In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses dev_get_tstats64() as its ndo_get_stats64 callback, but pfcp_link_setup() does not request NETDEV_PCPU_STAT_TSTATS. The net core therefore leaves dev->tstats NULL for PFCP devices. Creating a PFCP rtnetlink device can immediately ask the new netdev for stats while building the RTM_NEWLINK notification. That reaches dev_get_tstats64() and dereferences the NULL dev->tstats pointer. Set pcpu_stat_type to NETDEV_PCPU_STAT_TSTATS during PFCP link setup so the net core allocates the storage expected by dev_get_tstats64().","publishedAt":"2026-08-15T06:22:28","lastModifiedAt":"2026-08-17T06:19:22","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74286","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00168,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74286","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74286","en":"https://www.redsauce.net/en/cves/CVE-2026-74286","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74286","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74286","de":"https://www.redsauce.net/de/cves/CVE-2026-74286","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74286","el":"https://www.redsauce.net/el/cves/CVE-2026-74286"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74286"}}