CVE-2026-74559: xsk: drain continuation descs after overflow in xsk_build_skb()
In the Linux kernel, the following vulnerability has been resolved:
xsk: drain continuation descs after overflow in xskbuildskb()
Fix generic xmit path multi-buffer logic when packets are either too big (count of descriptors exceed MAXSKBFRAGS) or an invalid descriptor is included in fragmented packet. Introduce xdpsock::draincont and act upon this flag - when it is set, keep on consuming descriptors from AFXDP Tx ring and put them directly onto Cq. Previously these descriptors were silently lost and could never be reached again.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74559?
CVE-2026-74559 has a risk severity rating of 11.
How do I fix CVE-2026-74559?
To fix CVE-2026-74559, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What are the implications of CVE-2026-74559?
CVE-2026-74559 may lead to system instability or denial of service due to issues with packet fragmentation in the kernel.
Which version of the Linux kernel is affected by CVE-2026-74559?
CVE-2026-74559 affects various versions of the Linux kernel prior to the patch released on August 15, 2026.
Is CVE-2026-74559 actively exploited?
As of the latest information, there are no confirmed reports of active exploitation regarding CVE-2026-74559.