CVE-2026-74626 (CVSS 7.5)

Description

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore takes one buffer out of the RX queue while the interface remains up, and enough failures eventually stall reception. A retry path could refill the queue later, but ntb_netdev has none. Allocate the replacement first instead. If that fails, drop the packet and repost the same skb. This keeps the queue full and lets packet delivery resume as soon as memory is available again.

Is your site exposed to CVE-2026-74626?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploit Prediction

0.0050

Probability of exploitation

0.42%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/18781cc0bfb5c7f2a51ac6d678a28f101b7c35c5 https://git.kernel.org/stable/c/272df0fbe6f3e04e22bc67fbdd9ac24586b942f4 https://git.kernel.org/stable/c/3f2a15f33f86f7bd5b920669fd40c06725d72a1e https://git.kernel.org/stable/c/6d7f8a23c130d768c0976c2578b214353674e18f https://git.kernel.org/stable/c/755fd7843f300d724caceabdf9bb13adc8701540 https://git.kernel.org/stable/c/a4e340971fe8ccd245d206db4d43b2a0eec240bd https://git.kernel.org/stable/c/d2121faf133ac3bf9531b53a7e21273649a08517 https://git.kernel.org/stable/c/fcaf8ba7e56bb73319ac107a63b907d59536192c

Frequently Asked Questions

What is CVE-2026-74626? +

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_netdev: Preserve RX queue depth on allocation failure ntb_netdev_rx_handler() hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore takes one buffer out of the RX queue while the interface remains up, and enough failures eventually stall reception. A retry path could refill the queue later, but ntb_netdev has none. Allocate the replacement first instead. If that fails, drop the packet and repost the same skb. This keeps the queue full and lets packet delivery resume as soon as memory is available again. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2026-74626? +

CVE-2026-74626 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0050, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-74626? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-74626