CVE-2026-74317

A flaw was found in the Linux kernel's ixgbe network driver. This vulnerability occurs when configuring eXpress Data Path (XDP) queues on systems with a high number of CPUs and specific network adapters. An attacker could potentially trigger a memory corruption issue by exploiting the incorrect configuration of XDP transmit queues. This could lead to a system crash or other unpredictable behavior.

An out of bounds write in the ixgbe XDP setup path can occur because netif_set_xps_queue is called for XDP Tx queues that are not exposed as normal netdev Tx queues. On systems with at least 64 CPUs and an affected queue layout, loading an XDP program can configure one more XDP queue than the netdev XPS code expects, leading to a KASAN reported slab out of bounds write in __netif_set_xps_queue. For the CVSS the PR:L is used in the paranoid score because XDP attach is privileged but may be delegated through CAP_NET_ADMIN, container networking rights, or service accounts rather than full root. The issue is not directly network reachable and requires local control over XDP or network device configuration. Impact is at least local denial of service via kernel crash and in worst case may allow confidentiality and integrity impact due to kernel memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.