CVE-2026-74269

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An underflow issue exists in the bnxt rx multi page skb() function when handling XDP head-grow. The problem occurs during the construction of the skb head using the expression napi build skb(data ptr - bp->rx offset, rxr->rx page size). When the head is adjusted, the calculation can result in an address before the fragment start, leading to a corrupted page pool fragment reference. This corruption may cause a page to be prematurely recycled while still in use, potentially resulting in a double free during driver teardown.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.