CVE-2026-74697

bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

State: Published
Severity: 8.2 High
Published: Aug 22, 2026
Updated: Oct 21, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled.

Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bfcd8d791ec18496772d117774398e336917f56e to before 68c181af7cd1ca9cbf29acd95911073bfd3c6397Affected bfcd8d791ec18496772d117774398e336917f56e to before 7aee22a35978b44784612c156e358e375ddf5d16Affected bfcd8d791ec18496772d117774398e336917f56e to before 410da4428b1f47bf9a84bdc0bcaa089d73ba2048Affected bfcd8d791ec18496772d117774398e336917f56e to before b61c4911204a0a2f900e538d64ceb608f6c9614dAffected bfcd8d791ec18496772d117774398e336917f56e to before 927e2617a36f49752cb5613900ca21f40593f07dAffected bfcd8d791ec18496772d117774398e336917f56e to before aab3b5f4d8ec8598606ee011e219ef824ae25ca0Affected bfcd8d791ec18496772d117774398e336917f56e to before c1962ab4645a914a91ff492735881150ddc8a79eAffected bfcd8d791ec18496772d117774398e336917f56e to before c3faf548a00f4c17100cc9204746975fa46a73b9Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.152 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.45 through 6.18.Not affected 7.1.9 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

bfcd8d791ec18496772d117774398e336917f56e to before 68c181af7cd1ca9cbf29acd95911073bfd3c6397Affected
bfcd8d791ec18496772d117774398e336917f56e to before 7aee22a35978b44784612c156e358e375ddf5d16Affected
bfcd8d791ec18496772d117774398e336917f56e to before 410da4428b1f47bf9a84bdc0bcaa089d73ba2048Affected
bfcd8d791ec18496772d117774398e336917f56e to before b61c4911204a0a2f900e538d64ceb608f6c9614dAffected
bfcd8d791ec18496772d117774398e336917f56e to before 927e2617a36f49752cb5613900ca21f40593f07dAffected
bfcd8d791ec18496772d117774398e336917f56e to before aab3b5f4d8ec8598606ee011e219ef824ae25ca0Affected
bfcd8d791ec18496772d117774398e336917f56e to before c1962ab4645a914a91ff492735881150ddc8a79eAffected
bfcd8d791ec18496772d117774398e336917f56e to before c3faf548a00f4c17100cc9204746975fa46a73b9Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.152 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.45 through 6.18.*Not affected
7.1.9 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.