Cloudanix VulnDB

CVE-2026-74710

High · 7.8

CVSS

7.8

EPSS

0.2%

Published

Aug 22, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsk_tx_metadata) to preserve compatibility with applications that do not use launch-time metadata.

Affected packages

Ecosystem Package Introduced Fixed