CVE-2026-74742

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the veth poll() function where the index of the peer TX queue to wake is incorrectly derived from rq->xdp rxq.queue index. This field is only initialized when an XDP program is attached. In multi-queue setups using GRO (Generic Receive Offload) without an XDP program, the queue index remains 0 for all queues. Consequently, if veth xmit() stops a peer TX queue other than queue 0 due to a full ptr ring (NETDEV TX BUSY), that queue is never woken because the poller incorrectly wakes queue 0. Since veth does not implement ndo tx timeout, the netdev watchdog does not trigger, causing the queue to remain stopped indefinitely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.