CVE-2026-74616

A flaw was found in the Linux kernel's XDP (eXpress Data Path) component. When XDP frames are cloned, a specially crafted frame can cause the skb_shared_info structure to overwrite live packet data. This improper handling of memory during frame cloning can lead to corruption of XDP return metadata, potentially resulting in system instability or a denial of service.

This vulnerability is rated as Important because successful exploitation can cause kernel memory corruption, leading to system crashes, denial of service, or potential privilege escalation. Red Hat Enterprise Linux systems are only susceptible if administrators actively deploy and attach eBPF programs utilizing eXpress Data Path (XDP) to clone or broadcast network packets. Default installations do not load or execute XDP frame-cloning pipelines, significantly reducing the default exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.