CVE-2026-74285

A flaw was found in the Linux kernel's network subsystem. An issue in the netif_rxq_cleanup_unlease() function, responsible for tearing down network queue memory providers, allows a device to perform Direct Memory Access (DMA) to an incorrect memory address. This occurs because the DMA mappings are revoked before the physical queue is stopped, creating a window where the device can access stale or zeroed memory. This could lead to memory corruption and system instability.

This vulnerability is rated Moderate because triggering the race condition requires local access and active teardown of leased receive queues, limiting the blast radius primarily to a system denial of service. The underlying netkit queue leasing capability is an emerging feature not enabled or shipped in enterprise production kernels. Consequently, Red Hat Enterprise Linux releases do not contain the vulnerable code and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.