Riskcovery

CVE-2026-74708

xsk: validate launch-time metadata size

State
Published
Severity
7.8 High
Published
Aug 22, 2026
Updated
Oct 16, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xsk: validate launch-time metadata size

Launch-time metadata extends beyond the first 16 bytes of struct xsk_tx_metadata. Reject the request when the registered metadata area does not contain the complete field.

Snapshot the validated flags for the generic transmit path and use that snapshot for request and completion processing, avoiding inconsistent decisions if user space changes the flags concurrently.

Note that only xsk_skb_metadata is properly using the flags, __xsk_buff_get_metadata ignores them. Next commits address that.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ca4419f15abd19ba8be1e109661b60f9f5b6c9f0 to before af511afa1d2977f384044df78d6fbf9fba653f7aAffected
  • ca4419f15abd19ba8be1e109661b60f9f5b6c9f0 to before bc63d47611c07b0d5d655fe1a590861931527920Affected
  • ca4419f15abd19ba8be1e109661b60f9f5b6c9f0 to before 439ce2dddf3d22129b9113a7881637256a35e936Affected
  • d9d736c416c9a85f84e15435ba82a177262e745bAffected
  • 6.14.2 to before 6.15Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.45 through 6.18.*Not affected
  • 7.1.9 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.