SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74697

HIGH · CVSS 8.2 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's bnxt_en driver, specifically concerning the handling of End of Frame Padding (EOP) on AGG rings, which can lead to data corruption when Relaxed Ordering (RO) is enabled on older chips (P5 and earlier). This issue may result in valid data being overwritten by zero padding, compromising data integrity. Organizations using affected Linux systems, particularly those with older hardware, should prioritize addressing this vulnerability to prevent potential data loss or corruption.

CVE
CVE-2026-74697
Severity
HIGH
CVSS
8.2
EPSS
0.43%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.