CVE-2026-74559

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the generic xmit path multi-buffer logic within the xsk build skb() function. This occurs when packets are too large, exceeding the MAX SKB FRAGS descriptor count, or when a fragmented packet contains an invalid descriptor. In these scenarios, descriptors from the AF XDP Tx ring were silently lost and became unreachable. The fix introduces the xdp sock::drain cont flag to ensure that when set, the system continues consuming descriptors from the AF XDP Tx ring and places them directly onto the Cq (Completion Queue).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.