CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.
- CVSS 3.1
- 8.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
- EPSS
- 0.43% probability · 37th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/410da4428b1f47bf9a84bdc0bcaa089d73ba2048
- https://git.kernel.org/stable/c/68c181af7cd1ca9cbf29acd95911073bfd3c6397
- https://git.kernel.org/stable/c/7aee22a35978b44784612c156e358e375ddf5d16
- https://git.kernel.org/stable/c/aab3b5f4d8ec8598606ee011e219ef824ae25ca0
- https://git.kernel.org/stable/c/b61c4911204a0a2f900e538d64ceb608f6c9614d
- https://git.kernel.org/stable/c/c1962ab4645a914a91ff492735881150ddc8a79e
- https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.