CVE-2026-74626

CVE-2026-74626

High · published August 22, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NTB: ntb_netdev: Preserve RX queue depth on allocation failure

ntb_netdev_rx_handler() hands the received skb to the network stack

before allocating its replacement. If the allocation fails, nothing is

reposted. Every failure therefore takes one buffer out of the RX queue

while the interface remains up, and enough failures eventually stall

reception.

A retry path could refill the queue later, but ntb_netdev has none.

Allocate the replacement first instead. If that fails, drop the packet

and repost the same skb. This keeps the queue full and lets packet

delivery resume as soon as memory is available again.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00501 · 42.0th percentile
Published
2026-08-22T20:16Z
References (8)
EPSS history
Timeline
  • 22 AUG 15:32Z
    NTB: ntb_netdev: Preserve RX queue depth on allocation failure
    cvelistv5