CVE-2026-74697 (CVSS 8.2)

Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.

Is your site exposed to CVE-2026-74697?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

EPSS — Exploit Prediction

0.0043

Probability of exploitation

0.37%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/410da4428b1f47bf9a84bdc0bcaa089d73ba2048 https://git.kernel.org/stable/c/68c181af7cd1ca9cbf29acd95911073bfd3c6397 https://git.kernel.org/stable/c/7aee22a35978b44784612c156e358e375ddf5d16 https://git.kernel.org/stable/c/aab3b5f4d8ec8598606ee011e219ef824ae25ca0 https://git.kernel.org/stable/c/b61c4911204a0a2f900e538d64ceb608f6c9614d https://git.kernel.org/stable/c/c1962ab4645a914a91ff492735881150ddc8a79e https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9

Frequently Asked Questions

What is CVE-2026-74697? +

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption. It has a CVSS v3.1 base score of 8.2 (HIGH).

How severe is CVE-2026-74697? +

CVE-2026-74697 has a CVSS v3.1 score of 8.2 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0043, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-74697? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-74697