CVE-2026-74741
Description
In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as legacy INTx or single MSI), wx->msix_entry is not allocated or initialized. Calling NGBE_INTR_MISC(wx) dereferences wx->msix_entry->entry, leading to a NULL pointer dereference crash. This issue was introduced by fixing the IRQ vector when the number of VFs is 7. Fix the issue by explicitly checking `pdev->msix_enabled` to determine the correct vector index. Additionally, as a side fix, set the interrupt mask to BIT(0) for the non-MSI-X fallback. In MSI/INTx mode, the MISC and queue interrupts share vector 0, and the WX_PX_MISC_IVAR register is only valid in the MSI-X case. Thus, BIT(0) is the correct mask for the miscellaneous cause when MSI-X is disabled.
How to fix
- Linux Linuxcef4c5b9aca24651d069adf9462b221df6a2a669, 0ab482b2195edc000262f0eae1cdcb416b8f335d, 5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4174c0c331a2aa3322d3b3be532808deb041b37d ≤ v < cef4c5b9aca24651d069adf9462b221df6a2a669, 4174c0c331a2aa3322d3b3be532808deb041b37d ≤ v < 0ab482b2195edc000262f0eae1cdcb416b8f335d, 4174c0c331a2aa3322d3b3be532808deb041b37d ≤ v < 5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea, 6.16 | cef4c5b9aca24651d069adf9462b221df6a2a669, 0ab482b2195edc000262f0eae1cdcb416b8f335d, 5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.