CVE-2026-74559

A flaw was found in the Linux kernel's AF_XDP (eXpress Data Path) networking component. This vulnerability, located in the xsk_build_skb() function, involves improper handling of network packet descriptors. When processing large or malformed multi-buffer packets, the system fails to properly drain continuation descriptors after an overflow, leading to their silent loss. An attacker could exploit this issue by sending specially crafted packets, resulting in a denial of service that impacts network communication.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.