CVE-2026-74626
Received Received - Intake

NTB Netdev RX Queue Depth Preservation Flaw

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore takes one buffer out of the RX queue while the interface remains up, and enough failures eventually stall reception. A retry path could refill the queue later, but ntb_netdev has none. Allocate the replacement first instead. If that fails, drop the packet and repost the same skb. This keeps the queue full and lets packet delivery resume as soon as memory is available again.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-74626
EUVD
EUVD-2026-64563

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's NTB (Non-Transparent Bridge) network device driver. When the driver receives a network packet, it processes the packet before allocating memory for a replacement buffer. If memory allocation fails, the driver does not repost the original buffer, reducing the RX queue depth. Over time, repeated failures can deplete the queue, stalling network reception until the system runs out of memory.

Detection Guidance

This vulnerability affects the Linux kernel's ntb_netdev module, specifically related to RX queue handling. Detection requires checking kernel logs for ntb_netdev errors or RX queue stalls. Monitor dmesg or journalctl for messages about allocation failures in the network stack. No specific commands are provided in the context.

Impact Analysis

If exploited, this flaw could cause network traffic to stop unexpectedly on systems using NTB network devices. It may lead to denial-of-service conditions where the affected system stops receiving network packets, potentially disrupting services relying on network communication.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Update to a kernel version containing the fix for ntb_netdev RX queue handling. Monitor network interface performance and kernel logs for signs of RX queue stalls after patching.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74626. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart