CVE-2026-74666

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where packet set ring() updates the RX ring state under sk receive queue.lock but publishes the tpacket receive mode through po->prot hook.func after releasing that lock. This allows packet poll() and packet recvmsg() to execute the pressure clearing path after the ring has been cleared while still recognizing tpacket rcv, leading the packet rcv has room() function to dereference stale or NULL ring storage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.