CVE-2026-74710
High
Description
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsk_tx_metadata) to preserve compatibility with applications that do not use launch-time metadata.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 22, 2026
First seenAug 22, 2026
How to fix
Update
- Linux Linux21b8536aee819792f1b4b38b9aacf2a073025d49, 642c6e73fce17fdca93a5793c4d22359fda866d7, cfb9d2976b277e554e28c165e3eff4b4a8ea10bd, 1bb30b181d9f0484e141f8411e15ed906d5c6780 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 341ac980eab90ac1f6c22ee9f9da83ed9604d899 ≤ v < 21b8536aee819792f1b4b38b9aacf2a073025d49, 341ac980eab90ac1f6c22ee9f9da83ed9604d899 ≤ v < 642c6e73fce17fdca93a5793c4d22359fda866d7, 341ac980eab90ac1f6c22ee9f9da83ed9604d899 ≤ v < cfb9d2976b277e554e28c165e3eff4b4a8ea10bd, 341ac980eab90ac1f6c22ee9f9da83ed9604d899 ≤ v < 1bb30b181d9f0484e141f8411e15ed906d5c6780, 6.8 | 21b8536aee819792f1b4b38b9aacf2a073025d49, 642c6e73fce17fdca93a5793c4d22359fda866d7, cfb9d2976b277e554e28c165e3eff4b4a8ea10bd, 1bb30b181d9f0484e141f8411e15ed906d5c6780 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.