CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.
Affected versions
Linux kernel versions
5.4
and later are affected. Fixed in
5.10.265,
5.15.216,
6.1.183,
6.6.152,
6.18.45,
7.1.9,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-74697?
CVE-2026-74697 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.4 onward and has been patched in 5.10.265, 5.15.216, 6.1.183 and others. CVE-2026-74697 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74697?
Yes. CVE-2026-74697 has been patched. Fixed versions include 5.10.265, 5.15.216, 6.1.183 and others. If you are running Linux kernel 5.4 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74697 actively exploited?
No. CVE-2026-74697 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.