Linux Kernel Zero-Copy Metadata Processing Vulnerability Affecting Network Drivers

CVE-2026-74707

What is CVE-2026-74707?

In the Linux kernel, a vulnerability related to the validation of TX metadata within the zero-copy path has been identified. During the processing of network requests, the system allows user space to modify metadata after initial validation, potentially resulting in unauthorized access and control over network operations. A fix ensures that metadata is validated consistently during the entire transaction process, preventing manipulations that could compromise network security.

References