Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-74317— ixgbe: do not configure xps for XDP queues

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于对XDP Tx队列错误配置XPS，可能导致slab越界写入和系统警告。

CVSS 7.8 · High EPSS 0.17% · P6 Updated Oct 17, 2026

Possible ATT&CK Techniques 1 AI

T1055 · Process Injection

Affected Version Matrix 8

Vendor	Product	Version Range	Status
Linux	Linux	`33fdc82f08835de4c39a00657742f5b11db00d32< f488b83a38103e8eea442cd8fa1a10f982bd60af`	affected
		`33fdc82f08835de4c39a00657742f5b11db00d32< a2a224f5e344ccb1ec3693a0735822db9214e2ca`	affected
		`33fdc82f08835de4c39a00657742f5b11db00d32< 7bd4355272de34c2e90e34b72c5613736d03c32b`	affected
		`4.12`	affected
		`< 4.12`	unaffected
		`6.18.57≤ 6.18.*`	unaffected
		`7.1.5≤ 7.1.*`	unaffected
		`7.2≤ *`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-74317

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ixgbe: do not configure xps for XDP queues

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queues netif_set_xps_queue() should not be called for an XDP Tx queue, since such queues are not netdev-exposed. On systems with number of CPUs >=64, on E610 adapter, netdev is configured with maximum number queue pairs being 63 (due to MSI-X assignment), but configuring XDP results in 64 XDP queues. So, during XDP program load, when netif_set_xps_queue() is called for the last XDP queue, we get a WARNING with a call trace and KASAN report afterwards (if enabled). [ 2012.699800] WARNING: net/core/dev.c:2854 at __netif_set_xps_queue+0x116a/0x1e40, CPU#36: xdpsock/103668 [...] [ 2012.700029] RIP: 0010:__netif_set_xps_queue+0x116a/0x1e40 [ 2012.700035] Code: b6 34 06 48 89 f8 83 e0 07 83 c0 01 40 38 f0 7c 09 40 84 f6 0f 85 03 0a 00 00 0f b7 44 24 40 66 43 89 44 6a 18 e9 01 fb ff ff <0f> 0b e9 f2 ee ff ff 44 8b 44 24 44 45 85 c0 74 50 4d 85 e4 0f 84 [ 2012.700040] RSP: 0018:ffff8882369aeb28 EFLAGS: 00010246 [ 2012.700046] RAX: 0000000000000000 RBX: 000000000000003f RCX: 0000000000000000 [ 2012.700050] RDX: 1ffff1111da3d891 RSI: ffff888120e34250 RDI: ffff8888ed1ec488 [ 2012.700054] RBP: ffff888913281560 R08: 0000000000000000 R09: ffff8888ed1ec000 [ 2012.700058] R10: ffff8888a2e83180 R11: 0000000000000000 R12: 0000000000007fa8 [ 2012.700061] R13: 000000000000003f R14: ffff888120e34854 R15: ffff8889132817c8 [ 2012.700065] FS: 00007fc8ea9ff740(0000) GS:ffff88884cefe000(0000) knlGS:0000000000000000 [ 2012.700069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2012.700073] CR2: 00007f81c8000020 CR3: 00000002299f8006 CR4: 00000000007726f0 [ 2012.700077] PKRU: 55555554 [ 2012.700080] Call Trace: [ 2012.700084] <TASK> [ 2012.700087] ? ktime_get+0x61/0x150 [ 2012.700097] ? usleep_range_state+0x133/0x1b0 [ 2012.700108] ? __pfx_usleep_range_state+0x10/0x10 [ 2012.700114] netif_set_xps_queue+0x31/0x50 [ 2012.700119] ixgbe_configure_tx_ring+0x472/0x920 [ixgbe] [...] [ 2012.700486] ixgbe_xdp+0x38f/0x750 [ixgbe] [...] [ 2012.701094] BUG: KASAN: slab-out-of-bounds in __netif_set_xps_queue+0x1ac5/0x1e40 [ 2012.701100] Write of size 4 at addr ffff88888d43cff8 by task xdpsock/103668 Skip XPS configuration for XDP Tx queues.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于对XDP Tx队列错误配置XPS，可能导致slab越界写入和系统警告。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	33fdc82f08835de4c39a00657742f5b11db00d32 ~ f488b83a38103e8eea442cd8fa1a10f982bd60af	-
Linux	Linux	4.12	-

II. Public POCs for CVE-2026-74317

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-74317

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-74317 (2)

https://www.cve.org/CVERecord?id=CVE-2026-74317

Same Patch Batch · Linux · 2026-08-15 · 844 CVEs total

CVE-2026-74309	10.0 CRITICAL	vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-72407	10.0 CRITICAL	geneve: validate inner network offset in geneve_gro_complete()
CVE-2026-72408	10.0 CRITICAL	geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-74475	10.0 CRITICAL	vxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-72421	10.0 CRITICAL	ipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-74280	10.0 CRITICAL	crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-74279	10.0 CRITICAL	crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-72493	9.9 CRITICAL	net: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-74398	9.8 CRITICAL	ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
CVE-2026-72191	9.8 CRITICAL	ntfs3: validate split-point offset in indx_insert_into_buffer
CVE-2026-74315	9.8 CRITICAL	lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
CVE-2026-72084	9.8 CRITICAL	scsi: target: Bound PR-OUT TransportID parsing to the received buffer
CVE-2026-72083	9.8 CRITICAL	scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
CVE-2026-74401	9.8 CRITICAL	dlm: fix add msg handle in send_queue ordered
CVE-2026-72249	9.8 CRITICAL	netfilter: flowtable: use dst in this direction when pushing IPIP header
CVE-2026-74493	9.8 CRITICAL	net/smc: fix socket use-after-free during link group termination
CVE-2026-74345	9.8 CRITICAL	RDMA/siw: Fix endpoint/socket association handling
CVE-2026-72251	9.8 CRITICAL	netfilter: nf_nat_sip: reload possible stale data pointer
CVE-2026-72248	9.8 CRITICAL	netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-74495	9.8 CRITICAL	igbvf: Fix leak in TX DMA error cleanup

Showing top 20 of 844 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux

V. Comments for CVE-2026-74317

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-74317— ixgbe: do not configure xps for XDP queues

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 8

I. Basic Information for CVE-2026-74317

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-74317

III. Intelligence Information for CVE-2026-74317

Patches & Fixes for CVE-2026-74317 (2)

Same Patch Batch · Linux · 2026-08-15 · 844 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-74317

Leave a comment