CVE-2026-74659

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bridge MRP (Media Redundancy Protocol) component where the br mrp alloc test skb() function fails to clear the linear data area when building MRP test frames. Specifically, on the MRA ring-role branch, the sub-option TLV (Type-Length-Value) header is appended using skb put(), but the sub tlv->length field and two trailing alignment bytes are not initialized. This results in three uninitialized bytes being transmitted in every MRA MRP Test frame.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.