CVE-2026-74708

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xsk component where launch-time metadata extends beyond the first 16 bytes of the xsk tx metadata structure. The system fails to reject requests when the registered metadata area does not contain the complete field. Additionally, the generic transmit path does not snapshot validated flags, which could lead to inconsistent decisions if user space modifies the flags concurrently. The xsk skb metadata function uses these flags, while the xsk buff get metadata() function ignores them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.