PT-2026-79703

CVE-2026-74698

·

Published

2026-08-22

·

Updated

2026-11-10

Description by

CVSS 4.0
6.7
Medium
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the net/mlx5e driver where the mlx5e queue start() function deactivates and re-activates all channels while only closing the queue being restarted. Subsequently, the mlx5e activate txqsq() function unconditionally calls netdev tx reset queue(), which zeros the Byte Queue Limits (BQL) counters for channels that still have in-flight Transmit Work Queue Elements (TX WQEs). This leads to an over-charge during the next completion, triggering a kernel BUG in the dql completed() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:22309-1
OPENSUSE-SU-2026:22313-1
USN-8959-1
USN-8960-1
USN-9019-1
USN-9020-1
USN-9021-1
Found an issue in the description? Have something to add? Feel free to write us 👾