CVE-2026-74741

net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

State
Published
Severity
7.5 High
Published
Aug 26, 2026
Updated
Aug 27, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

In non-MSI-X mode (such as legacy INTx or single MSI), wx->msix_entry is not allocated or initialized. Calling NGBE_INTR_MISC(wx) dereferences wx->msix_entry->entry, leading to a NULL pointer dereference crash.

This issue was introduced by fixing the IRQ vector when the number of VFs is 7. Fix the issue by explicitly checking `pdev->msix_enabled` to determine the correct vector index.

Additionally, as a side fix, set the interrupt mask to BIT(0) for the non-MSI-X fallback. In MSI/INTx mode, the MISC and queue interrupts share vector 0, and the WX_PX_MISC_IVAR register is only valid in the MSI-X case. Thus, BIT(0) is the correct mask for the miscellaneous cause when MSI-X is disabled.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4174c0c331a2aa3322d3b3be532808deb041b37d to before cef4c5b9aca24651d069adf9462b221df6a2a669Affected
  • 4174c0c331a2aa3322d3b3be532808deb041b37d to before 0ab482b2195edc000262f0eae1cdcb416b8f335dAffected
  • 4174c0c331a2aa3322d3b3be532808deb041b37d to before 5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6eaAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.46 through 6.18.*Not affected
  • 7.1.10 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.