CVE-2026-74665

A flaw was found in the Linux kernel. Incorrect length accounting for skb (socket buffer) fragments after an eXpress Data Path (XDP) program adjusts the fragment area can lead to an out-of-bounds read. This allows an attacker to potentially disclose sensitive kernel pointers and corrupt user-space data, impacting data integrity and confidentiality.

This vulnerability is classified as having a Moderate severity because exploitation requires an active generic XDP program that modifies packet fragment boundaries, an operation restricted to privileged administrators with CAP_NET_ADMIN capabilities. By default, Red Hat environments do not deploy generic XDP programs that resize packet fragments, significantly limiting practical exposure. Furthermore, older distributions such as Red Hat Enterprise Linux 8 and 9 do not contain the affected subsystem code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.