CVE-2026-74580 vulnerability older PVE

L

levicoleman

New Member
Oct 22, 2026
1
0
0
HI,

We would like to confirm the remediation status of CVE-2026-74580 for a customer cluster running Proxmox VE 7.4.

The cluster currently has the following kernel versions across its eight nodes:

  • Six nodes are running kernel 5.15.102-1-pve, with pve-kernel-5.15 package version 7.3-3 installed.
  • Two nodes are running kernel 5.15.158-2-pve, with pve-kernel-5.15 package version 7.4-15 installed.
We checked the available pve-kernel changelog but could not find an explicit reference to this CVE. We also noted that the fix is referenced in the newer proxmox-kernel-7.0 series, but we could not confirm the status for the legacy pve-kernel-5.15 series.

Could you please clarify the following?

  1. Is Proxmox VE 7.4 affected by CVE-2026-74580?
  2. Has a fix been backported to the pve-kernel-5.15 series?
  3. If a fix is available, which package version should the customer install to address this vulnerability?
  4. If no fix is available for this kernel series, what remediation or mitigation do you recommend?
We would appreciate your confirmation so that we can provide the customer with the correct remediation guidance.
 
You must log in or register to reply here.
Top Bottom
Back