CVE-2026-74285

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netif rxq cleanup unlease() function where the memory provider installed on a physical RX queue via a netkit queue lease is torn down in the wrong order. The system revokes DMA mappings using netif mp uninstall rxq() before stopping the physical queue with netif mp close rxq(). Because the physical queue remains active, its NAPI (New API, a mechanism for improving network packet processing) can continue consuming net iov entries from the page pool alloc cache after their dma addr has been cleared. This creates a condition where the device may perform DMA (Direct Memory Access) operations to a stale or zero address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.