CVE-2026-74737

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the packet reception path where the MAC Port ID is extracted from the RX DMA Descriptor metadata. The helper function cppi5 desc get tags ids() incorrectly assigns a 16-bit Source Tag to the port id variable, whereas only the lower 8-bits represent the actual MAC Port ID. The upper 8-bits are hardware-reserved and contain arbitrary values, leading to out-of-bound memory access and sporadic kernel crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.