CVE-2026-74560

A flaw was found in the Linux kernel's AF_XDP (Address Family eXpress Data Path) subsystem. When handling multi-buffer transmissions, the xsk_drop_skb() function incorrectly cancels completion queue (CQ) reservations without submitting buffer addresses to the CQ. This leads to a buffer leak where userspace permanently loses track of these buffers, potentially causing resource exhaustion and affecting system stability.

This vulnerability is rated as Low severity because exploitation requires local access with elevated privileges, and the failure mode is restricted to memory buffer exhaustion within the calling application rather than full kernel compromise. In standard Red Hat Enterprise Linux deployments, establishing AF_XDP sockets is not permitted for unprivileged users, requiring the CAP_NET_RAW capability. The risk is further confined to workloads specifically configured to leverage AF_XDP multi-buffer transmission features.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.