CVE-2026-74710
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsk_tx_metadata) to preserve compatibility with applications that do not use launch-time metadata.
Affected versions
Linux kernel versions
6.8
and later are affected. Fixed in
6.12.104,
6.18.45,
7.1.9,
7.2
and their respective stable series.
References
4 totalFrequently asked questions
-
What is CVE-2026-74710?
CVE-2026-74710 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.8 onward and has been patched in 6.12.104, 6.18.45, 7.1.9 and others. CVE-2026-74710 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-74710?
Yes. CVE-2026-74710 has been patched. Fixed versions include 6.12.104, 6.18.45, 7.1.9 and others. If you are running Linux kernel 6.8 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-74710 actively exploited?
No. CVE-2026-74710 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.