CVE-2026-74559

Summary

In the Linux kernel, the following vulnerability has been resolved:

xsk: drain continuation descs after overflow in xsk_build_skb()

Fix generic xmit path multi-buffer logic when packets are either too big (count of descriptors exceed MAX_SKB_FRAGS) or an invalid descriptor is included in fragmented packet. Introduce xdp_sock::drain_cont and act upon this flag - when it is set, keep on consuming descriptors from AF_XDP Tx ring and put them directly onto Cq. Previously these descriptors were silently lost and could never be reached again.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcf24f5a5feeaae34c1a34d1e04f8ac697290427a < ceb00cb87a22c42d20c39336213db2b843ca9e34affected
LinuxLinuxcf24f5a5feeaae34c1a34d1e04f8ac697290427a < 5e94d74e4f3baebaa083288f33b4be7ce0a34982affected
LinuxLinuxcf24f5a5feeaae34c1a34d1e04f8ac697290427a < bd44a6dcd4248883de90f5dad53ae80066e27096affected
LinuxLinux6.6affected
LinuxLinux0 < 6.6unaffected
LinuxLinux6.18.44 <= 6.18.*unaffected
LinuxLinux7.1.8 <= 7.1.*unaffected
LinuxLinux7.2-rc6 <= *unaffected

Weaknesses

References