---
id: CVE-2026-74697
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

  EOP (End of frame padding) on the AGG ring may cause overlapping of
  zero padding at the end of one…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

  EOP (End of frame padding) on the AGG ring may cause overlapping of
  zero padding at the end of one…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L'
published: '2026-08-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74697'
references:
  - url: 'https://git.kernel.org/stable/c/410da4428b1f47bf9a84bdc0bcaa089d73ba2048'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68c181af7cd1ca9cbf29acd95911073bfd3c6397'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7aee22a35978b44784612c156e358e375ddf5d16'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aab3b5f4d8ec8598606ee011e219ef824ae25ca0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b61c4911204a0a2f900e538d64ceb608f6c9614d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c1962ab4645a914a91ff492735881150ddc8a79e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/927e2617a36f49752cb5613900ca21f40593f07d'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74697.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-74697'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2521478'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-74697'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74697'
  - url: 'https://kernelcve.org/list/?q=CVE-2026-74697'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026082235-CVE-2026-74697-aa0a@gregkh/T
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.0045
epssPercentile: 0.38955
ingestedAt: '2026-10-14T13:30:58.540Z'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    68c181af7cd1ca9cbf29acd95911073bfd3c6397
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    7aee22a35978b44784612c156e358e375ddf5d16
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    410da4428b1f47bf9a84bdc0bcaa089d73ba2048
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    b61c4911204a0a2f900e538d64ceb608f6c9614d
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    aab3b5f4d8ec8598606ee011e219ef824ae25ca0
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    c1962ab4645a914a91ff492735881150ddc8a79e
  - >-
    Linux >= bfcd8d791ec18496772d117774398e336917f56e <
    c3faf548a00f4c17100cc9204746975fa46a73b9
  - Linux 5.4
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-16T19:14:48.095926Z'
cwe:
  - CWE-787
scores:
  nvd: 8.2
  vendor: 6.8
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

EOP (End of frame padding) on the AGG ring may cause overlapping of
zero padding at the end of one segment with the next segment's data.
If Relaxed Ordering (RO) is enabled, the zero padding may overwrite
valid data in the next segment and corrupt the data.  Older chips
(P5 and older) do not automatically disable RO when EOP is enabled.
On some ARM systems, data corruption was reported on 57508 (P5)
chips with RO enabled.

Always disable EOP on all chips on the AGG rings when TPA is enabled
to fix the data corruption.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74697.json)