UBUNTU-CVE-2026-74710: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AFXDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsktxmetadata) to preserve compatibility with applications that do not use launch-time metadata.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-nvidia-tegrato a version that resolves this vulnerability.Fixed in 6.8.0-1036.39 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Configuration
Require AF_XDP TX metadata to be at least 16 bytes, rather than accepting lengths as small as eight bytes or using sizeof(struct xsk_tx_metadata).
Linux kernel AF_XDP TX metadata length = 16 bytes minimum
Event History
Frequently Asked Questions
Who can exploit this issue?
The vector indicates local access with low privileges is required. Exploitation also requires an attacker to use AF_XDP TX metadata with an undersized length.
Which metadata lengths are unsafe?
TX metadata lengths as small as eight bytes are accepted by the affected behavior, even though supported requests require at least 16 bytes. Metadata shorter than 16 bytes can allow the kernel to read beyond the registered area.
What can be done before an update is applied?
Do not allow AF_XDP applications to configure TX metadata shorter than 16 bytes. Applications that do not use launch-time metadata are intended to remain compatible with the corrected minimum-length check.