CVE-2026-74704

A flaw was found in the Linux kernel. The sch_cake ACK filter, responsible for processing network packets, contains a vulnerability. A remote attacker could send specially crafted malformed IP packets. This could lead to the system logging excessive warnings or, under specific configurations, cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires non-default queuing discipline configuration and specifically enabled panic settings to cause a denial of service. On Red Hat Enterprise Linux, the CAKE scheduler is not active by default, and ACK filtering must be explicitly configured on a network interface. Under standard operating conditions, receiving malformed packets only triggers kernel warning messages in the system log without disrupting network traffic or halting the host.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.