CVE-2026-74659

A flaw was found in the Linux kernel's Multiple Registration Protocol (MRP) bridge module. When constructing MRP test frames, the br_mrp_alloc_test_skb() function fails to properly initialize certain fields. This oversight results in three uninitialized bytes being transmitted in every MRA MRP_Test frame, potentially leading to the disclosure of sensitive information.

This vulnerability has been rated as having a Moderate impact because the data exposure is limited to a few uninitialized bytes per frame and requires non-default, explicit configuration of bridge ring roles. Under typical Red Hat Enterprise Linux deployments, this specialized bridging protocol is not in use, and supported releases do not ship the affected code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.