Skip to main content
CVE-2026-74543VulnerabilityPublished Updated

udp_tunnel_nic_unregister() · net: udp_tunnel: fix memory leak

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-74543· Medium

Not known to be exploited · fixed in f82a2ded3d7a9098267c84f14eafdb98c4550ac5 : update Microsoft when convenient.

Data as of 7 Nov 2026, 13:34 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in f82a2ded3d7a9098267c84f14eafdb98c4550ac5, d53a8b927ac9788257266e115d4901ec6f455387, b322532a4b774db1b480a2de84125910a70739a5 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 15 Aug 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < f82a2ded3d7a9098267c84f14eafdb98c4550ac5
Fixed in
  • f82a2ded3d7a9098267c84f14eafdb98c4550ac5
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < d53a8b927ac9788257266e115d4901ec6f455387
Fixed in
  • d53a8b927ac9788257266e115d4901ec6f455387
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < b322532a4b774db1b480a2de84125910a70739a5
Fixed in
  • b322532a4b774db1b480a2de84125910a70739a5
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < b712da45bd9b9835d132e9fbc0c3e43c164cb1fd
Fixed in
  • b712da45bd9b9835d132e9fbc0c3e43c164cb1fd
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < 080695e6f005e2396f1207fd69d24c442cb230c6
Fixed in
  • 080695e6f005e2396f1207fd69d24c442cb230c6
LinuxLinuxAffected
  • ≥ cc4e3835eff474aa274d6e1d18f69d9d296d3b76, < 52c753b46265243406690d980faa9514d3f53827
Fixed in
  • 52c753b46265243406690d980faa9514d3f53827

Description

A memory leak vulnerability exists in the udp_tunnel_nic_unregister() function of Microsoft software version 3.0. The issue was identified and published on September 23, 2026. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…