CVE-2026-74707

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the zero-copy path where TX metadata is validated during the acquisition of the descriptor context but read again when preparing the hardware request. This allows user space to modify the metadata between these two operations, bypassing the initial validation. The flaw is located in the xsk tx metadata request() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.