SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74710

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-22 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AF_XDP implementation, where it improperly accepts transmit (TX) metadata lengths as small as eight bytes, potentially allowing the kernel to read beyond the allocated memory area. This could lead to memory corruption or information leakage, impacting system stability and security. Organizations using Linux kernel versions with this flaw should prioritize patching to mitigate potential exploitation risks.

CVE
CVE-2026-74710
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsk_tx_metadata) to preserve compatibility with applications that do not use launch-time metadata.