CVE-2026-74698
Last modified
CVE-2026-74698 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activates all channels but closes only the queue being restarted. mlx5e_activate_txqsq() then unconditionally calls netdev_tx_reset_queue(), zeroing the BQL counters of channels that kept their in-flight TX WQEs.
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix BQL reset on SQ re-activation mlx5e_queue_start() deactivates and re-activates all channels but closes only the queue being restarted. mlx5e_activate_txqsq() then unconditionally calls netdev_tx_reset_queue(), zeroing the BQL counters of channels that kept their in-flight TX WQEs. The next completion then over-charges and trips the BUG_ON() in dql_completed(): kernel BUG at lib/dynamic_queue_limits.c:99! RIP: 0010:dql_completed+0x23d/0x280 Call Trace: <IRQ> mlx5e_poll_tx_cq+0x668/0xa60 mlx5e_napi_poll+0x5b/0x7b0 net_rx_action+0x15a/0x580 Reset BQL only when the SQ has no bytes in flight (sq->cc == sq->pc). In the case that reset is skipped, the outstanding WQEs will eventually complete and rebalance the dql. The dql->limit is carried across the reset.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= b2588ea40ec9472688289c1a644627c0f4a1f33f, < 88664c48d7d1eca8e1ac92da85c89c26af741cf1; >= b2588ea40ec9472688289c1a644627c0f4a1f33f, < d2897717cd222e575599d903d885c48602699800; >= b2588ea40ec9472688289c1a644627c0f4a1f33f, < e7386770be1bf810bcd6af39d1e4bfeab3408430 |
| Linux | Linux | 6.17 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74698?
How severe is CVE-2026-74698?
How do I fix CVE-2026-74698?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-74692In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74693In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74694In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74695In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74696In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74697In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74699In the Linux kernel, the following vulnerability has been re…
- CVE-2026-7470A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42…8.8
- CVE-2026-74700In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74701In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74702In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74703In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-74698?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
