CVE-2026-74559

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk_build_skb() Fix generic xmit path multi-buffer logic when packets are either too big (count of descriptors exceed MAX_SKB_FRAGS) or an invalid descriptor is included in fragmented packet. Introduce xdp_sock::drain_cont and act upon this flag - when it is set, keep on consuming descriptors from AF_XDP Tx ring and put them directly onto Cq. Previously these descriptors were silently lost and could never be reached again.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxecd0d1cde0478c232a867f14ec99cf97aff5eb30, ceb00cb87a22c42d20c39336213db2b843ca9e34, 5e94d74e4f3baebaa083288f33b4be7ce0a34982, bd44a6dcd4248883de90f5dad53ae80066e27096 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxcf24f5a5feeaae34c1a34d1e04f8ac697290427a ≤ v < ecd0d1cde0478c232a867f14ec99cf97aff5eb30, cf24f5a5feeaae34c1a34d1e04f8ac697290427a ≤ v < ceb00cb87a22c42d20c39336213db2b843ca9e34, cf24f5a5feeaae34c1a34d1e04f8ac697290427a ≤ v < 5e94d74e4f3baebaa083288f33b4be7ce0a34982, cf24f5a5feeaae34c1a34d1e04f8ac697290427a ≤ v < bd44a6dcd4248883de90f5dad53ae80066e27096, 6.6ecd0d1cde0478c232a867f14ec99cf97aff5eb30, ceb00cb87a22c42d20c39336213db2b843ca9e34, 5e94d74e4f3baebaa083288f33b4be7ce0a34982, bd44a6dcd4248883de90f5dad53ae80066e27096

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.