CVE-2026-74626

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-74626

Key Details

CVE	CVE-2026-74626
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-10-14
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

NTB: ntb_netdev: Preserve RX queue depth on allocation failure

ntb_netdev_rx_handler() hands the received skb to the network stack

before allocating its replacement. If the allocation fails, nothing is

reposted. Every failure therefore takes one buffer out of the RX queue

while the interface remains up, and enough failures eventually stall

reception.

A retry path could refill the queue later, but ntb_netdev has none.

Allocate the replacement first instead. If that fails, drop the packet

and repost the same skb. This keeps the queue full and lets packet

delivery resume as soon as memory is available again. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74626
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74626

Source

Reference

NVD

CVE