Linux Linux Kernel Vulnerability Exposed to Unauthenticated Network Attackers

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-74697

Key Details

CVE	CVE-2026-74697
CVSS Score / Version	8.2 (High) / CVSS v3.1
Updated	2026-10-14
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is low.
Affected products	Linux Kernel
Exploitation prediction (EPSS)	0.44% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

EOP (End of frame padding) on the AGG ring may cause overlapping of

zero padding at the end of one segment with the next segment's data.

If Relaxed Ordering (RO) is enabled, the zero padding may overwrite

valid data in the next segment and corrupt the data. Older chips

(P5 and older) do not automatically disable RO when EOP is enabled.

On some ARM systems, data corruption was reported on 57508 (P5)

chips with RO enabled.

Always disable EOP on all chips on the AGG rings when TPA is enabled

to fix the data corruption. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-74697
CVE	https://www.cve.org/CVERecord?id=CVE-2026-74697

Source

Reference

NVD

CVE